Privacy & telemetry
Short version: Zephyr collects no telemetry. The only network requests it makes are to fetch mods, check for updates, and (if you opted in) sync your profile recipes.
What gets sent off your machine
| Request | When | Endpoint |
|---|---|---|
| Mod metadata + downloads | Every time you browse / install | Thunderstore + CurseForge APIs and CDNs |
| Update check | On launch (if enabled) | api.github.com for our releases endpoint |
| Cloud sync push/pull | When you change a profile (signed-in only) | Zephyr's sync API |
| Discord OAuth handshake | When you sign in | discord.com |
That's the complete list.
What does NOT get sent
- No analytics. No "page views", no "feature usage", no crash pings.
- No user identifiers anywhere we can avoid them. The cloud sync API uses your Discord ID, but that's required to know whose recipes are whose.
- No mod-launch tracking. Zephyr doesn't tell anyone which game you launched, when, or which mods were active.
- No machine fingerprinting.
- No installed-mod manifests sent to anyone but Thunderstore/CurseForge themselves (and only on your explicit click to install).
Local storage
Everything Zephyr knows about you lives in your machine's data dir and never leaves it unless you opt in to cloud sync.
Disabling network features
If you want a fully offline experience:
- Disable Fetch mods automatically in Settings -> Miscellaneous so Zephyr stops polling Thunderstore in the background.
- Don't sign in to cloud sync.
- Once you've installed mods, Zephyr works fully offline (the mod files are local).
The launch update check still runs unless you block Zephyr at the firewall. Updates are never auto-applied - the dialog can simply be dismissed.
You can verify this by running Zephyr with networking off (airplane mode, or block its process with your firewall) - the only thing that breaks is browsing for new mods.
Cloud sync - what we store
If you opt in to cloud sync, the Zephyr sync API stores:
- Your Discord ID (the public snowflake - the same one anyone can see in your Discord profile).
- Your profile recipes (per-game profile names + mod recipes - package name, version, source, configs you've edited).
- A timestamp on each update.
Things we explicitly don't store:
- Email, IP (logged for rate-limiting only, deleted within 24h), or any other Discord-account info.
- Mod binaries (we never see the actual mod files).
- Game saves (Zephyr never touches saves, on cloud or local).
To remove your cloud copies, on the Profiles page click the cloud-off icon on each synced profile and tick Also delete from cloud in the confirmation dialog (only available for profiles you own). Logging out additionally clears the stored Discord token from this machine.
Source code
Everything above is verifiable in the source - src-tauri/src/ for the desktop side. If you find a network request that isn't documented here, it's a bug; please report it.
Third-party privacy policies
When you use Zephyr you also interact with these external services. Their privacy policies apply to that interaction:
We don't share data with any of these beyond what you explicitly trigger (downloading a mod, signing in, etc.).
Changes to this policy
If we ever add a feature that involves additional data being sent off your machine, it'll be opt-in, the privacy page on the website will be updated, and the change will be called out in release notes.