Privacy
Unplug the machine. Everything still works.
There is no account to make, nothing to sign into, and no usage data collected — not anonymised, not aggregated, not “to improve the product”. The suite is a program on your computer that opens your files.
The specifics
Four things worth checking rather than believing
Every one of them is in the published source, which is the point of publishing it.
Passwords go to the operating system
Mail account credentials are handed to the OS keystore — DPAPI on Windows, Keychain on macOS, libsecret on Linux — through Electron safeStorage. They are never written to a file the application can read back in clear text.
Message bodies cannot phone home
Mail renders in a frame with an empty sandbox attribute: no scripts, no forms, no same-origin access, no top-level navigation. The content policy blocks every remote fetch, so a tracking pixel cannot report that you opened the message. Remote images load only when you ask, per message.
Deleting is not destroying
Removing a file moves it to the operating system trash. An office suite should never be the reason something is unrecoverable.
Your documents never leave the machine
There is no sync, no cloud tier, no crash reporter and no document telemetry. The engine works in buffers in a local process; nothing about a file you open is transmitted anywhere.
The exception
There is exactly one network call, and here it is
A page claiming zero network activity would be easier to write and would be false. This is what the suite does contact, and how to stop it.
The update check
Twenty-five seconds after launch, and then every six hours, an installed copy asks GitHub whether a newer release exists. If one does it downloads in the background and installs when you next quit — never while you are working. Running from source never checks at all.
- • One HTTPS request to api.github.com for the release feed, carrying no identifier beyond what any HTTP request carries.
- • Nothing about your documents, your mail or your machine is sent.
- • It is a setting. Turn it off and no request is made at all — not a smaller one, none.
Why say this at all? Because you will find it in the source, and a privacy page that omitted it would tell you exactly how much the rest of it is worth.
Read it rather than trust it
Every claim on this page is a file in a public repository.