Mantyl is local-first by architecture, not by promise. This page describes exactly what reaches us, in plain language, because a trust product owes you that.
The mantyl command-line tool contains no telemetry, no analytics and no phone-home behaviour of any kind. Scanning, verification, passport generation and your agent transcripts all stay on your machine. Session transcripts pass through secret redaction before they are even written to your own disk. The only network calls the CLI ever makes are the ones you explicitly trigger: publishing a passport, or the optional LLM analysis you configure with your own API key, which sends redacted excerpts to your chosen provider under their terms.
When you run mantyl publish and confirm, the passport document you approved is uploaded and hosted at an address derived from its digest. Your source code is never uploaded. Hosted passports are readable by anyone who has the link. You can remove a hosted passport at any time with the delete token shown at publish, and removal is immediate.
mantyl.dev uses two analytics tools. Vercel Web Analytics is cookie-free and records aggregate page views, referrers and a small set of anonymous product events, such as an install command being copied or a checkout being opened. Google Analytics 4 receives the same product events plus page views so that site behaviour and payment analytics read in one place; it sets its own cookies and processes data under Google’s terms. We use it for product analytics only: Google advertising features and audience sharing are switched off, and no event carries your code, your content or your identity. When you arrive from an ad or a campaign link, the campaign parameters in that link are kept for the length of your visit in your browser’s session storage and attached to those same anonymous events, so we can tell which campaigns work. Google Analytics and Whop’s measurement pixel, which records page views and checkout attribution under Whop’s privacy policy, load only after you accept them on the cookie banner, and declining changes nothing about how the site works. We do not run retargeting trackers, and none of these tools ever sees your code or your transcripts.
Accounts are optional and exist for paid features. Signing in with GitHub shares your GitHub name and email address with us and nothing else; no repository access is requested. Session state is held in a signed cookie in your browser. Sign out ends it.
Requesting independent verification uploads the git-tracked files of the project being verified, with your explicit consent shown at the moment of upload, including a file count and size. The uploaded bundle is deleted the moment the verification run completes, and working copies are destroyed after the run. The site also records two anonymous funnel events at checkout: that a checkout was opened and that one completed.
Payments are processed by Whop. Your card details go to Whop directly and never touch Mantyl; what we store against a verification is the payment reference, the pack, the currency and the time of payment. Billing information you enter at checkout is handled under Whop’s own privacy policy, and your receipt is emailed by Whop.
Asking us to email you the setup command stores the address you give, the time, and the campaign context of your visit, and sends exactly one email through Postmark containing the command and two documentation links. No list, no follow-ups, no sharing; an email to the address below deletes the record. The form carries an unticked checkbox for the mailing list described next; leaving it unticked changes nothing about the setup email.
Subscribing to the monthly email, on a guide or with the checkbox above, stores your address, the exact consent wording you saw, the time, an optional answer to where you heard about us, and the campaign context of your visit. The list is used only for what the wording said: roughly one email a month about handing over AI-built software, sent through Buttondown, with a one-click unsubscribe in every message. Requesting the handover checklist on a guide additionally sends that one checklist email through Postmark. We never buy, sell, share or enrich addresses, and an email to the address below deletes everything we hold.
Joining the Agency waitlist stores the email address you give us (or, if you join signed in without one, your account id), the time, and which page you joined from. It is used for exactly one thing: telling you when the Agency tier opens. No marketing list, no sharing, and an email to the address below removes you.
Questions and requests, including deletion of account data, go to joelparfitt@qzee.app. Material changes to this policy will be dated at the top of this page and noted in the changelog.