Agent Keyring — Privacy Policy

The short version

Agent Keyring has no server, no account system, no analytics, and no tracking. Your secrets are stored in your own OS keychain and/or your own cloud project, under your own logins. We never receive, see, or transmit your secrets.

What is stored where

• Local secrets stay in your Mac's Keychain (service agent-keyring), encrypted by macOS.
• Shared secrets are stored in your own Google Cloud, AWS, Azure, or OCI account, only when you choose a shared store. That provider's privacy policy and your IAM settings govern them.
• App preferences (cloud CLI path, project name, keychain service, clipboard timeout) are stored locally in macOS UserDefaults. These are pointers, never secret values.

What the app accesses

The macOS app reads and writes only keychain items under its own service, and invokes the cloud CLIs you already installed (gcloud, aws, az, oci) using your existing sessions. Secret values are passed to CLIs on standard input, never on the command line. Revealed values stay on your device; copied values are cleared from the clipboard automatically after the interval you set (30 seconds by default).

Third parties

None, beyond the cloud providers you choose for shared storage. No advertising, no analytics SDKs, no crash-reporting services.

Children

Agent Keyring is a developer tool and is not directed at children under 13.

Changes & contact

Changes will be posted on this page. Questions: open an issue at github.com/jbaker00/agent-keyring/issues.