Local AI telemetry: which tools send what by default, and the switch for each

Some programs that run AI models on your own computer also send information out of it: a usage report, an update check, a list of recommended models, a crash report. "Phoning home" is the everyday name for a program contacting its maker's servers on its own, with nobody having asked it to. Update checks and usage reports work this way, and that is not, by itself, a sign of anything wrong. This site is a register of the local AI programs we have run, benched or read, and the system software around them: whether each sends anything by default, what kind of call it is, when, to whom, the switch that stops it, whether we proved that the switch works, and how we know. Of the 24 programs here with a call on by default, 12 describe each such call in their own documents and 11 describe some of it, linked in each row. Some of these calls exist to keep you safe or up to date; this site says how to turn each one off, not that you should. A call out is not an accusation: each row prints the maker's own stated reason beside what we found, in the maker's words. What is left out, and why, is under what this register does not cover.

Addresses. One thing is true of any call out, so no row repeats it: the server a program reaches sees the network address the call came from, and the time. A row mentions an address only when the program puts one inside what it sends.

Corrections. Corrections welcome: hello@strata2signal.com. A correction that comes with a receipt (a maker's document, a release note, a commit, a run you can repeat) is acknowledged within 7 days and acted on within 14; until the row changes, it carries a visible line saying what was disputed and by whom. Every change, with its date, is on updates.

One line per product and version. A product's name opens its own page, with everything we hold on it. Each "sends by default" cell says how deep we looked; each switch cell says whether we proved it, and on which version. The four grade words, measured, witnessed, read and inferred, are the ceiling of what a row may claim. Sort by any column; the page claims nothing by order, carries no score and no ranking, and its counts are per kind of call, never summed across kinds.

Sort Product, A to ZProduct, Z to AGroupSends by defaultKind of callDate checked, newest firstDate checked, oldest first
APUS-OpenJev-v182c9c56cSends by defaultnone found · code read at 82c9c56cKind of call—The switch—Date checked (UTC)2026-10-10
Version
read at 82c9c56c
Group
research engines and model repositories we read
Sends by default
none found · code read at 82c9c56c: its runtime loads only local files
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
n/a (a runtime library)
Other cloud features
—
Licence
apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the model and tokenizer load local files only
ComfyUIb0d97089Sends by defaultfetches: yes · read in code; reports: unclear · read in code; not read · a keyword search found nothingKind of callreports · fetchesThe switchnetwork_mode = offline · not tested by us
none found
Date checked (UTC)2026-09-28 to 2026-10-10
Version
read at b0d97089
Group
servers and apps you run
Sends by default
manager channel: yes · read in code: in its default mode it reads its node lists from GitHub
frontend sentry: unclear · read in code: an error tracker's SDK starts in your browser when you open the UI, if a build flag is on (its value in the shipped package was not read); no call that sends a report was found outside the SDK
core: not read · a keyword search found nothing
Kind of call
reports · fetches
When and where
manager channel: as a side effect of a local request; The code at e11e9034 reads its node lists from its channel URL while network_mode is 'public', its default; not run.; where: code host
frontend sentry: on its own; Your browser, from the tool's web UI: the SDK starts when the page loads, if a build flag is on (its value in the shipped package was not read); whether it sends anything without a capture call was not read. Not run.; where: error tracker
The switch
manager channel: network_mode = offline · found in code; not tested by us
frontend sentry: none found
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
GPL-3.0 (read 2026-10-10)
Date checked (UTC)
2026-09-28 to 2026-10-10
Receipt
the core at b0d97089 · the SDK's start, with default integrations off outside the cloud build · the build-time flag · the core's pin on the frontend · the default channel · the default network mode · the node list fetched from the channel · the startup setting's default (off)
DwarfStar (ds4)0aaea5a2Sends by defaultnone found · code read at 0aaea5a2Kind of call—The switch—Date checked (UTC)2026-10-10
Version
read at 0aaea5a2
Group
research engines and model repositories we read
Sends by default
none found · code read at 0aaea5a2: the engine and its server make no call out; the multi-machine modes and the agent's browser connect only when you turn them on
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the agent's browser driver · the tensor-parallel connect · the distributed connect
FlashInfer0.6.18.post1Sends by defaultyes · read in codeKind of callfetchesThe switchFLASHINFER_NO_DOWNLOAD=1 · not tested by usDate checked (UTC)2026-10-10
Version
read at 0.6.18.post1
Group
libraries other tools install for you
Sends by default
yes · read in code: when a kernel binary it needs is missing
Kind of call
fetches
When and where
as a side effect of a local request; The code at v0.6.18.post1 downloads a kernel binary at run time, each time one it needs is not on disk; we did not run it.; where: download server
The switch
FLASHINFER_NO_DOWNLOAD=1 · found in code; not tested by us
Listens beyond the machine by default
n/a (a library)
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the default download address · the switch, and the download when a file is missing · the README's install options
fwupd2.1.1-1ubuntu3.1Sends by defaultyes · read in its unit files, its packaging and the firmware service's documentsKind of callchecksThe switchdisable fwupd-refresh.timer · not tested by usDate checked (UTC)2026-10-10
Version
read at 2.1.1-1ubuntu3.1
Group
Ubuntu and the network software around them
Sends by default
yes · read in its unit files, its packaging and the firmware service's documents
Kind of call
checks
When and where
on its own; Its timer runs fwupdmgr refresh every hour, with a random delay of up to an hour, except inside containers; the refresh downloads the metadata of the Linux Vendor Firmware Service (LVFS) from cdn.fwupd.org. How often a run finds the metadata old enough to download again was not read. Not wire-checked.; where: update service
The switch
disable fwupd-refresh.timer · documented behaviour of systemd; not tested by us
Listens beyond the machine by default
n/a (a system service)
Other cloud features
—
Licence
LGPL-2.1 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the refresh unit · the firmware service's privacy page · the package · the refresh timer: hourly, with a random delay, not in containers · the build installs the timer · the default remote's metadata address · the default remote is installed switched on · Ubuntu's packaging leaves debhelper's unit handling at its default · debhelper (13.31ubuntu1, Ubuntu 26.04) enables every installed unit that has an install section · Ubuntu 26.04's desktop metapackage recommends fwupd · and so does its server metapackage
Gradio6.2.0Sends by defaultreports: yes · read in code; checks: yes · read in codeKind of callreports · checksThe switchGRADIO_ANALYTICS_ENABLED=False · not tested by usDate checked (UTC)2026-10-10
Version
read at 6.2.0
Group
libraries other tools install for you
Sends by default
analytics: yes · read in code
version check: yes · read in code
Kind of call
reports · checks
When and where
analytics: on its own; The code at 6.2.0 sends an event when an app is created, when it launches, and on errors, each in a background thread, through huggingface_hub's telemetry sender: a request to huggingface.co whose path names the event; not run.; where: vendor telemetry collector
version check: on its own; The code at 6.2.0 checks for a newer version in a background thread each time an app builds its interface with analytics on; not run.; where: update service
The switch
analytics: GRADIO_ANALYTICS_ENABLED=False · found in code and documented; not tested by us
version check: GRADIO_ANALYTICS_ENABLED=False · found in code; not tested by us
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the switch's default 'True' · each event handed to huggingface_hub's telemetry sender · the event the launch sends, and its fields · where an app reads the switch · huggingface_hub's sender at v1.27.0: a request to the Hub's telemetry path · the version check · run only while analytics are on
huggingface_hub1.27.0Sends by defaultchecks: yes · read in code and in its own documents; reports: yes · read in codeKind of callreports · checksThe switchHF_HUB_DISABLE_UPDATE_CHECK=1 · not tested by us
HF_HUB_DISABLE_TELEMETRY=1 · not tested by us
Date checked (UTC)2026-10-10
Version
read at 1.27.0
Group
libraries other tools install for you
Sends by default
cli update check: yes · read in code and in its own documents: when you run the hf command
user agent fields: yes · read in code: fields in the user agent of every Hub request
Kind of call
reports · checks
When and where
cli update check: as a side effect of a local request; Read in code at v1.27.0: at the hf command's start, at most once every 24 hours (a marker file records the last check); a Homebrew install asks Homebrew's registry instead of PyPI; not run.; where: update service
user agent fields: as a side effect of a local request; Read in code at v1.27.0: on every Hub request, inside the request's user agent; not run.; where: model hub
The switch
cli update check: HF_HUB_DISABLE_UPDATE_CHECK=1 · documented; not tested by us
user agent fields: HF_HUB_DISABLE_TELEMETRY=1 · documented; not tested by us. The switch changes the content of a request the library makes anyway, so only a run that reads content could decide it.
Listens beyond the machine by default
n/a (a command-line tool) · n/a (a library)
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
its environment-variables page, HF_HUB_DISABLE_UPDATE_CHECK · the check, its 24-hour marker, and its request to PyPI · the user agent and the fields telemetry adds · the switch and DO_NOT_TRACK · its environment-variables page, HF_HUB_DISABLE_TELEMETRY
imajev6ee8a2c5Sends by defaultnone found · code read at 6ee8a2c5Kind of call—The switch—Date checked (UTC)2026-10-10
Version
read at 6ee8a2c5
Group
research engines and model repositories we read
Sends by default
none found · code read at 6ee8a2c5: its server and playground talk only to your own machine
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the optional reasoning engine posts to the address you give it · the playground calls its own server
lev0ea955f5Sends by defaultnone found · code read at 0ea955f5Kind of call—The switch—Date checked (UTC)2026-10-10
Version
read at 0ea955f5
Group
research engines and model repositories we read
Sends by default
none found · code read at 0ea955f5: it reaches Hugging Face only when you give it a Hub ID instead of a local folder
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
n/a (a library)
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the checkpoint download, only for a Hub ID
llama.cppb11312Sends by defaultunclear · read in code; not read · a keyword search found nothing in the serverKind of callfetchesThe switch--no-webui · not tested by usDate checked (UTC)2026-10-01 to 2026-10-10
Version
read at b11312
Group
servers and apps you run
Sends by default
webui model browser: unclear · read in code: the web UI's model browser asks Hugging Face and llama.app from your browser; whether opening the UI alone asks was not read
server: not read · a keyword search found nothing in the server
Kind of call
fetches
When and where
webui model browser: only when you ask for it; Your browser, from the tool's web UI: the code at b11312 fetches a model catalogue and Hugging Face model data when its model browser asks; downloads then run through the server. Not run.; where: model hub
The switch
webui model browser: --no-webui · documented; not tested by us
Listens beyond the machine by default
loopback only · not covered
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-01 to 2026-10-10
Receipt
--offline: 'forces use of cache, prevents network access' · the server README's flag table · the --host flag's default · the catalogue address · the Hugging Face address · the catalogue fetch · the web UI's default and its flag · pull request #27947
llama.cpp3cf03257Sends by defaultyes · read in codeKind of callfetchesThe switch-DLLAMA_USE_PREBUILT_UI=OFF · not tested by usDate checked (UTC)2026-10-10
Version
read at 3cf03257
Group
servers and apps you run
Sends by default
yes · read in code: during the build, its default option downloads the web UI
Kind of call
fetches
When and where
as a side effect of a local request; During the build, when no web UI files were built or placed locally: the default CMake option downloads a prebuilt web UI from a Hugging Face bucket, the checksum file first and then the archive, skipping the archive when a copy already on disk matches the checksum; a later build of the same version whose stamp matches skips the request.; where: model hub
The switch
-DLLAMA_USE_PREBUILT_UI=OFF · found in the build file; not tested by us
Listens beyond the machine by default
n/a (a build step)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the build option and its default · the provisioning step the build runs · the order of preference: local files, an npm build, then the bucket · the requests, the fallback to 'latest' and the token header · the archive's download, skipped when a copy on disk matches · the stamp that skips a repeat request · with no UI files, the build goes on without an embedded UI
LM Studio0.4.26 (the newest release on its changelog on 2026-10-10; its policy names no version)Sends by defaultreports · checks: yes · read in its own privacy policy; reports · fetches: when chosen · read in its own privacy policyKind of callreports · checks · fetchesThe switchnone found
do not search in the app · not tested by us
Date checked (UTC)2026-10-10
Version
read at 0.4.26 (the newest release on its changelog on 2026-10-10; its policy names no version)
Group
servers and apps you run
Sends by default
update check: yes · read in its own privacy policy
model search: when chosen · read in its own privacy policy
Kind of call
reports · checks · fetches
When and where
update check: on its own; Per its privacy policy: when the app checks for updates; how often, and to which host, was not stated. Its source is not public; this row rests on its privacy policy, read on 2026-10-10.; where: update service
model search: only when you ask for it; Per its privacy policy: when you search for or download an AI model; the host was not stated. Its source is not public; this row rests on its privacy policy, read on 2026-10-10.; where: vendor API
The switch
update check: none found
model search: do not search in the app · documented behaviour; not tested by us
Listens beyond the machine by default
not covered
Other cloud features
cloud models and web search, processed on its providers' servers once you buy and use them (to avoid it: do not buy or use the cloud features)
Licence
not read: its source is not public (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
its desktop app privacy policy, 'When the App Checks for Updates'
motd-news (Ubuntu's login news)14ubuntu6.2Sends by defaultyes · read in codeKind of callreports · checksThe switchENABLED=0 · not tested by usDate checked (UTC)2026-10-10
Version
read at 14ubuntu6.2
Group
Ubuntu and the network software around them
Sends by default
yes · read in code: where motd-news-config is installed, as Ubuntu Server's metapackage installs it
Kind of call
reports · checks
When and where
on its own; Its timer runs the script twice a day on the timer's calendar, each run delayed at random by up to 12 hours, and once, a minute after boot; the script then fetches the news. Not wire-checked.; where: vendor API
The switch
ENABLED=0 · found in code; not tested by us
Listens beyond the machine by default
n/a (a login script)
Other cloud features
—
Licence
GPL-2.0-or-later (the script's own header) (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the script: its switch, its address and its user agent · the switch: the script exits unless ENABLED=1 · the default setting ENABLED=1, shipped by motd-news-config · motd-news-config installs that file as /etc/default/motd-news · motd-news-config's description: 'Install this package if you want motd-news to be enabled.' · the timer: twice a day with a random delay, and a minute after boot · Ubuntu 26.04's server metapackage depends on motd-news-config
NetworkManager1.54.3-2ubuntu3.1Sends by defaultyes · read in its config and its manualKind of callchecksThe switch[connectivity] enabled=false · not wire-checkedDate checked (UTC)2026-10-10
Version
read at 1.54.3-2ubuntu3.1
Group
Ubuntu and the network software around them
Sends by default
yes · read in its config and its manual: where Ubuntu's connectivity package is installed
Kind of call
checks
When and where
on its own; Per its manual: every 300 s while a network connection exists (the default when no interval is set); the Ubuntu package sets the address. Not wire-checked.; where: vendor API
The switch
[connectivity] enabled=false · set over D-Bus, read back; not wire-checked
Listens beyond the machine by default
n/a (network software)
Other cloud features
—
Licence
GPL-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the manual's connectivity section · the Ubuntu package that sets the address · the Ubuntu connectivity package's config: the check address · where that package installs it · Ubuntu 26.04's desktop metapackage recommends that package · and so does its minimal desktop metapackage
Ollama0.34.4Sends by defaultyes · read in codeKind of callfetchesThe switchOLLAMA_NO_CLOUD=1 · we have not published a test of itDate checked (UTC)2026-10-10 to 2026-10-11
Version
read at 0.34.4
Group
servers and apps you run
Sends by default
cloud catalogue: yes · read in code
recommended models: yes · read in code
Kind of call
fetches
When and where
cloud catalogue: on its own; The code at v0.34.4 fetches the catalogue of Ollama's cloud models at start, in the background; we did not run this version.; where: vendor API
recommended models: on its own; The code at v0.34.4 fetches the list at start and about every 4 hours after, sooner after a failed fetch; we did not run this version.; where: vendor API
The switch
cloud catalogue: OLLAMA_NO_CLOUD=1 · found in code and documented; we have not published a test of it
recommended models: OLLAMA_NO_CLOUD=1 · found in code and documented; we have not published a test of it
Listens beyond the machine by default
loopback only
Other cloud features
cloud models (tags ending in -cloud) and web search, which run on ollama.com once you pick them (to avoid it: do not pick a cloud model; OLLAMA_NO_CLOUD=1 turns the features off)
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10 to 2026-10-11
Receipt
the gate on the cloud switch, then the list and the details fetched · the two requests · the signed request to ollama.com · Ollama's version set in a header on each catalogue request · the default address · the header's name, X-Ollama-Client-Version · how the request is signed: the time added to its query, then the method and the address with that time signed · what the signature carries: the installation's public key, then a signature made with its private key · Ollama history, 'Who can talk to it' · the address and the 4-hour interval · the gate on the switch, and the signed request · the last list kept on disk · the switch's name
Ollama0.32.14Sends by defaultyes · read in codeKind of callfetchesThe switchOLLAMA_NO_CLOUD=1 · we have not published a test of itDate checked (UTC)2026-09-28 to 2026-10-11
Version
read at 0.32.14
Group
servers and apps you run
Sends by default
cloud catalogue: yes · read in code
recommended models: yes · read in code
Kind of call
fetches
When and where
cloud catalogue: on its own; The code at v0.32.14 fetches the catalogue of Ollama's cloud models at start, in the background; we did not run this version.; where: vendor API
recommended models: on its own; At start, then about every 4 hours (sooner after a failed fetch). The code at v0.32.14 sets the 4-hour interval.; where: vendor API
The switch
cloud catalogue: OLLAMA_NO_CLOUD=1 · found in code and documented; we have not published a test of it
recommended models: OLLAMA_NO_CLOUD=1 · found in code and documented; we have not published a test of it
Listens beyond the machine by default
loopback only
Other cloud features
cloud models (tags ending in -cloud) and web search, which run on ollama.com once you pick them (to avoid it: do not pick a cloud model; OLLAMA_NO_CLOUD=1 turns the features off)
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-09-28 to 2026-10-11
Receipt
the server starts its caches as it starts · the recommended-models cache and the catalogue cache started together · the catalogue fetched in the background at start · the gate on the cloud switch, then the list and the details fetched · the two requests · the signed request to ollama.com, with Ollama's version in a header · the default address, the version header's name and the signing step · how the request is signed: the time added to its query, then the method and the address with that time signed · what the signature carries: the installation's public key, then a signature made with its private key · the gate reads the cloud switch · the switch in the source at v0.32.14 · Ollama history, 'Who can talk to it' · the fetch and its 4-hour interval in the source at v0.32.14 · the last list kept on disk, in the source at v0.32.14
ONNX Runtime1.30.0Sends by defaultyes · measured; yes · inferred; likely · read in the shipped librariesKind of callreportsThe switchORT_DISABLE_TELEMETRY=1 · proven on 1.30.0
ORT_DISABLE_TELEMETRY=1 · not tested inside these packages
ORT_DISABLE_TELEMETRY=1 · not tested by us
Date checked (UTC)2026-09-28
Version
read at 1.30.0
Group
libraries other tools install for you
Sends by default
telemetry · the PyPI wheel for Linux x86-64: yes · measured
telemetry · the PyPI wheel, as a fresh install of one of 19 named Python packages resolved it: yes · inferred: through ONNX Runtime 1.30.0, once the program loads it; the packages' own code not read
telemetry · the npm package for Node.js, its Linux libraries: likely · read in the shipped libraries: the collector's address and the switch's name are there
telemetry · the GPU wheel on PyPI, Linux x86-64: likely · read in the shipped libraries: the collector's address and the switch's name are there
Kind of call
reports
When and where
telemetry · the PyPI wheel for Linux x86-64: on its own; First attempt 9.2 s after launch (observed 9.150 to 9.232 s at the listener's TCP accept, in 5 runs: 3 pre-registered and 2 audit re-runs), on a laptop on mains power. The library's source sets this timer to 9 s when it reads the machine as charging on an unmetered network, and 18 s otherwise (read, not run). When it cannot connect, it tried 4 more times within 120 s, with growing gaps, the last 77.4 to 90.3 s after launch in the same 5 runs. What follows a successful upload was not observed (seen with every handshake hung up, on mains power).; where: vendor telemetry collector
telemetry · the PyPI wheel, as a fresh install of one of 19 named Python packages resolved it: on its own; As the 1.30.0 row, from the moment the program imports ONNX Runtime; pulling it in is not the same as running it.; where: vendor telemetry collector
telemetry · the npm package for Node.js, its Linux libraries: on its own; Not run. The libraries carry the same collector address and switch name as the Python package.; where: vendor telemetry collector
telemetry · the GPU wheel on PyPI, Linux x86-64: on its own; Not run. The privacy file covers the official builds, and these libraries carry the same collector address as the CPU wheel.; where: vendor telemetry collector
The switch
telemetry · the PyPI wheel for Linux x86-64: ORT_DISABLE_TELEMETRY=1 · proven on 1.30.0, from launch to 120 s, n = 3; not met: 3: the switch was set in the environment the program started with; it was not read back from the running process; 5: a queue left on disk by an earlier run without the switch was not seeded and re-run with it
telemetry · the PyPI wheel, as a fresh install of one of 19 named Python packages resolved it: ORT_DISABLE_TELEMETRY=1 · proven on ONNX Runtime 1.30.0 itself (its own row); not tested inside these packages
telemetry · the npm package for Node.js, its Linux libraries: ORT_DISABLE_TELEMETRY=1 · found in the shipped library; not tested by us
telemetry · the GPU wheel on PyPI, Linux x86-64: ORT_DISABLE_TELEMETRY=1 · found in the shipped library; not tested by us
Listens beyond the machine by default
n/a (a library) · n/a (libraries)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-09-28
Receipt
the package on npm (registry record) · the privacy file at v1.30.0 · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'Are you affected?' · the wheel on PyPI · the kit's run summary · run 1, every event · run 2, every event · run 3, every event · the audit's first re-run, every event · the audit's second re-run, every event · the predictions, frozen before the first run · the audit's re-runs · the collector's address in the source at v1.30.0 · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'What we measured' · the row it carries from · the resolution, published with its date, Python version and platform
ONNX Runtime1.29.1Sends by defaultyes · read in codeKind of callreportsThe switchORT_DISABLE_TELEMETRY=1 · not tested by usDate checked (UTC)2026-10-10
Version
read at 1.29.1
Group
libraries other tools install for you
Sends by default
yes · read in code: the same telemetry code and privacy file as 1.29.0
Kind of call
reports
When and where
on its own; As 1.29.0: the code at v1.29.1 starts the same uploader; we did not run this build.; where: vendor telemetry collector
The switch
ORT_DISABLE_TELEMETRY=1 · documented; not tested by us
Listens beyond the machine by default
n/a (a library)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the collector's address in the source at v1.29.1 · the privacy file at v1.29.1 · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'What changed, and when'
ONNX Runtime1.29.0 and 1.30.0Sends by defaultyes · read in its own privacy file; not read · the build recipe, read at two commits, passes --no_telemetry, which leaves the telemetry out of the build; the package itself was not run; not read · its privacy file says the WebAssembly builds carry no telemetry; we did not read or run themKind of callreportsThe switchORT_DISABLE_TELEMETRY=1 · not tested by usDate checked (UTC)2026-10-10
Version
read at 1.29.0 and 1.30.0
Group
libraries other tools install for you
Sends by default
telemetry: yes · read in its own privacy file
not read · the conda-forge builds: not read · the build recipe, read at two commits, passes --no_telemetry, which leaves the telemetry out of the build; the package itself was not run
not read · the WebAssembly build for browsers: not read · its privacy file says the WebAssembly builds carry no telemetry; we did not read or run them
Kind of call
reports
When and where
telemetry: on its own; Not run. The privacy file says these platforms send the same trace events over HTTPS.; where: vendor telemetry collector
The switch
telemetry: ORT_DISABLE_TELEMETRY=1 · documented; not tested by us
Listens beyond the machine by default
n/a (a library) · n/a (a library running in a browser)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
recipe/build.sh at the 1.29.0 commit · recipe/build.sh at the 1.30.0 commit · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'Are you affected?' · the privacy file at v1.30.0, 'Non-Windows' · the privacy file at v1.29.0 · the collector's address in the non-Windows telemetry source at v1.30.0 · the same address at v1.29.0 · the privacy file at v1.30.0
ONNX Runtime1.29.0Sends by defaultyes · measuredKind of callreportsThe switchORT_DISABLE_TELEMETRY=1 · undecidedDate checked (UTC)2026-09-28
Version
read at 1.29.0
Group
libraries other tools install for you
Sends by default
yes · measured
Kind of call
reports
When and where
on its own; First attempt 9.2 s after launch (observed 9.186 to 9.222 s at the listener's TCP accept, in 4 runs: 3 pre-registered and 1 audit re-run), on a laptop on mains power. The library's source sets this timer to 9 s when it reads the machine as charging on an unmetered network, and 18 s otherwise (read, not run). When it cannot connect, it tried 4 more times within 120 s, with growing gaps, the last 69.1 to 85.6 s after launch in the same 4 runs. What follows a successful upload was not observed (seen with every handshake hung up, on mains power).; where: vendor telemetry collector
The switch
ORT_DISABLE_TELEMETRY=1 · undecided: one run with the switch set, made by the audit outside the pre-registered plan, was silent (n = 1). The privacy file names the same switch for this version. That run: 2026-09-28, 09:10:11Z to 09:12:14Z (UTC).
Listens beyond the machine by default
n/a (a library)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-09-28
Receipt
the kit's run summary · run 1, every event · run 2, every event · run 3, every event · the audit's re-run without the switch, every event · the audit's run with the switch · the predictions, frozen before the first run · the audit's re-runs (check 4) · the privacy file at v1.29.0 · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'What we measured'
ONNX Runtime1.28.0, 1.29.0 and 1.30.0Sends by defaultyes · read in its own privacy fileKind of callreportsThe switchDisableTelemetryEvents · not tested by usDate checked (UTC)2026-10-10
Version
read at 1.28.0, 1.29.0 and 1.30.0
Group
libraries other tools install for you
Sends by default
yes · read in its own privacy file: through Windows' own event tracing, while a trace session collects
Kind of call
reports
When and where
on its own; Not run. Per the privacy file, events are recorded only while an external trace session collects them.; where: OS telemetry
The switch
DisableTelemetryEvents · documented; not tested by us
Listens beyond the machine by default
n/a (a library)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the privacy file at v1.30.0, 'Windows' · the privacy file at v1.30.0, the API switch · the privacy file at v1.29.0, 'Windows' · the privacy file at v1.28.0 · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'What changed, and when'
ONNX Runtime1.28.0Sends by defaultnone found · measuredKind of call—The switch—Date checked (UTC)2026-09-28
Version
read at 1.28.0
Group
libraries other tools install for you
Sends by default
none found · measured: none in 120 s from launch in 3 runs; a second launch and a working network not exercised
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
n/a (a library)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-09-28
Receipt
the kit's run summary · run 1, every event · run 2, every event · run 3, every event · the privacy file at v1.28.0: telemetry 'only implemented for Windows builds' · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'What we measured'
Open WebUI0.11.4Sends by defaultnot read · only its ONNX Runtime version checkedKind of call—The switch—Date checked (UTC)2026-10-10
Version
read at 0.11.4
Group
servers and apps you run
Sends by default
not read · only its ONNX Runtime version checked: it pins 1.26.0, from before ONNX Runtime's Linux telemetry; its own calls were not read
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
Open WebUI License (the name its LICENSE file states at v0.11.4) (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the pin in pyproject.toml · the pin in backend/requirements.txt · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'Which tools bring it in'
OpenVINO2026.4.0Sends by defaultyes · read in code and in its own documentsKind of callreportsThe switchopt_in_out --opt_out · not tested by usDate checked (UTC)2026-10-10
Version
read at 2026.4.0
Group
libraries other tools install for you
Sends by default
yes · read in code and in its own documents
Kind of call
reports
When and where
on its own; The code at 2026.4.0 sends an event when the package is imported, through Google Analytics (its collection host was not read); not run.; where: third-party analytics
The switch
opt_in_out --opt_out · documented; not tested by us
Listens beyond the machine by default
n/a (a library)
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
importing openvino imports its model-conversion tools · the tools send the import event · the telemetry start, with no opt-in dialog · its telemetry page · our small open deciders measurement (research hub, 2026-09-30), 'What we did not measure'
OpenWhispr1.10.2Sends by defaultfetches: yes · read in code; checks: yes · read in code; cloud you chose: when chosen · read in codeKind of callchecks · fetches · cloud you choseThe switchnone found
do not sign in · not tested by us
Date checked (UTC)2026-10-10
Version
read at 1.10.2
Group
servers and apps you run
Sends by default
assistant embedding model: yes · read in code: on the assistant's first use
avatars: yes · read in code: for any person shown with an email address
session check: yes · read in code: also for a guest who never signs in
update check: yes · read in code
signed in streaming usage: when chosen · read in code: only while signed in
Kind of call
checks · fetches · cloud you chose
When and where
assistant embedding model: as a side effect of a local request; The code at v1.10.2 downloads the model on the assistant's first use, when it is not already on disk; not run.; where: model hub
avatars: as a side effect of a local request; The code at v1.10.2 requests an avatar image each time it shows a person with an email address; not run.; where: third-party service
session check: on its own; The code at v1.10.2 asks for the account session when the app's window loads its account state, at every launch; whether its session library asks again later was not read. Not run.; where: vendor API
update check: on its own; The code at v1.10.2 checks 3 s after launch and every 4 hours after, whether or not automatic updates are on (the setting stops only downloads); not run.; where: code host
signed in streaming usage: only when you ask for it; The code at v1.10.2 posts a usage record after each streaming dictation while you are signed in, including when you use your own provider key; not run.; where: vendor API
The switch
assistant embedding model: none found
avatars: none found
session check: none found
update check: none found
signed in streaming usage: do not sign in · found in code: the request throws before sending without a sign-in; not tested by us
Listens beyond the machine by default
not covered
Other cloud features
OpenWhispr Cloud: transcription, sync and the agent, once you sign in (to avoid it: do not sign in)
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the two download addresses · its network allowlist · the avatar request built from the email's hash · the sign-in service's address · the session hook · its network allowlist · the usage record and its fields · sent after each streaming dictation, your own provider key included · its network allowlist · the check at 3 s and every 4 hours · the updater runs only where it can replace the app · electron-updater 6.8.9 sets the install ID header · electron-updater 6.8.9 stores the ID · its network allowlist
pip26.2.1Sends by defaultchecks: yes · read in code; reports: yes · read in codeKind of callreports · checksThe switchPIP_DISABLE_PIP_VERSION_CHECK=1 · not tested by us
none found
Date checked (UTC)2026-10-10
Version
read at 26.2.1
Group
Ubuntu and the network software around them
Sends by default
self version check: yes · read in code: at most once a week, when you run pip in a virtual environment or in a Python not marked externally managed
user agent fields: yes · read in code: in the user agent of every request to a package index
Kind of call
reports · checks
When and where
self version check: as a side effect of a local request; Read in code at 26.2.1: when pip runs and its last check is more than a week old, against PyPI or the index you configure; it returns before any request in an externally managed Python outside a virtual environment; not run.; where: package index
user agent fields: only when you ask for it; Read in code at 26.2.1: inside the user agent of each request pip makes to PyPI or the index you configure; pip is not a background caller.; where: package index
The switch
self version check: PIP_DISABLE_PIP_VERSION_CHECK=1 · documented; not tested by us
user agent fields: none found
Listens beyond the machine by default
n/a (a command-line tool)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the weekly interval · the check · the option's own help text · the externally-managed test: a marker file in the standard library, no virtual environment · Ubuntu 26.04's Python 3.14 package installs that marker · the user agent's fields
pollinate4.33-3.1ubuntu1Sends by defaultyes · read in codeKind of callreports · fetchesThe switchdisable pollinate.service · not tested by usDate checked (UTC)2026-10-10
Version
read at 4.33-3.1ubuntu1
Group
Ubuntu and the network software around them
Sends by default
yes · read in code: at first boot, until seeded, where installed (Ubuntu 24.04's server and minimal cloud metapackages)
Kind of call
reports · fetches
When and where
on its own; Per its unit: once at boot, until a seeded marker exists; not run.; where: vendor API
The switch
disable pollinate.service · documented behaviour of systemd; not tested by us
Listens beyond the machine by default
n/a (a boot script)
Other cloud features
—
Licence
GPL-3.0 (its README) (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the user agent and the request · the default server · the first-boot unit · Ubuntu 24.04's server metapackage depends on pollinate · and so does its minimal server metapackage · and its minimal cloud metapackage
pyannote.audio4.0.7Sends by defaultyes · read in its shipped config and its own documentsKind of callreportsThe switchPYANNOTE_METRICS_ENABLED=0 · not tested by usDate checked (UTC)2026-10-10
Version
read at 4.0.7
Group
libraries other tools install for you
Sends by default
yes · read in its shipped config and its own documents
Kind of call
reports
When and where
as a side effect of a local request; Per its README and its shipped config at 4.0.7: when a pipeline is loaded and for each file it processes; not run.; where: vendor telemetry collector
The switch
PYANNOTE_METRICS_ENABLED=0 · documented; not tested by us
Listens beyond the machine by default
n/a (a library)
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the shipped config: metrics on, and the endpoint · the README's Telemetry section
Qdrant1.19.1Sends by defaultyes · read in code and in its own documentsKind of callreportsThe switchQDRANT__TELEMETRY_DISABLED=true · not tested by usDate checked (UTC)2026-10-10
Version
read at 1.19.1
Group
servers and apps you run
Sends by default
yes · read in code and in its own documents
Kind of call
reports
When and where
on its own; The code at v1.19.1 reports at start and then every hour; not run.; where: vendor telemetry collector
The switch
QDRANT__TELEMETRY_DISABLED=true · documented; not tested by us
Listens beyond the machine by default
every interface
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the address and the hourly loop · the reporting loop · the switch, off by default · environment variables with the QDRANT__ prefix · the default bind · its usage-statistics page
SGLang0.5.20Sends by defaultnot read · a keyword search found nothingKind of call—The switch—Date checked (UTC)2026-10-01
Version
read at 0.5.20
Group
servers and apps you run
Sends by default
not read · a keyword search found nothing
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-01
Receipt
the source at tag v0.5.20
sherpa-onnx1.13.8Sends by defaultnot read · only its ONNX Runtime version checkedKind of call—The switch—Date checked (UTC)2026-10-10
Version
read at 1.13.8
Group
libraries other tools install for you
Sends by default
not read · only its ONNX Runtime version checked: its Linux x86-64 build bundles 1.28.2 (a third-party rebuild), from before ONNX Runtime's Linux telemetry; its own calls were not read
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the bundled ONNX Runtime archive named in the build files · ONNX Runtime 1.28.2's privacy file: telemetry only in Windows builds · our ONNX Runtime telemetry measurement (research hub, 2026-09-28), 'Which tools bring it in'
snapd2.76.3+ubuntu26.04Sends by defaultyes · read in its own documentsKind of callchecksThe switchrefresh.hold, or mask snapd's units · not tested by usDate checked (UTC)2026-10-10
Version
read at 2.76.3+ubuntu26.04
Group
Ubuntu and the network software around them
Sends by default
yes · read in its own documents
Kind of call
checks
When and where
on its own; Per its documents: the system refreshes four times a day by default. Not wire-checked at this version.; where: update service
The switch
refresh.hold, or mask snapd's units · documented; not tested by us
Listens beyond the machine by default
n/a (a system daemon)
Other cloud features
—
Licence
GPL-3.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
its 'Manage updates' page · the store's address in snapd's source (upstream tag 2.76.3) · the default refresh schedule, four times a day · the package
Strata8fc40ddeSends by defaultnone found · code read at 8fc40ddeKind of call—The switch—Date checked (UTC)2026-10-10
Version
read at 8fc40dde
Group
research engines and model repositories we read
Sends by default
none found · code read at 8fc40dde: no call on its own; it fetches only what a request or your configuration names
Kind of call
—
When and where
—
The switch
—
Listens beyond the machine by default
loopback only
Other cloud features
—
Licence
MIT (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the server's default host · an image URL named in a request is fetched · the own-name lookup, only when bound beyond loopback
Ubuntu Insights0.9.3ubuntuSends by defaultyes · seen on a machine of ours, and read in its own documentsKind of callreportsThe switchmask its two user timers · not wire-checkedDate checked (UTC)2026-10-10
Version
read at 0.9.3ubuntu
Group
Ubuntu and the network software around them
Sends by default
yes · seen on a machine of ours, and read in its own documents: a report saying you opted out, even with consent off
Kind of call
reports
When and where
on its own; A weekly user timer runs the upload. Seen on a machine of ours: the program's own record of four uploads, dated 2026-07-06 (twice), 2026-08-06 and 2026-09-08, read 2026-09-28; and the upload address in the binary (seen on a working network).; where: OS telemetry
The switch
mask its two user timers · set, read back; not wire-checked
Listens beyond the machine by default
n/a (a reporting tool)
Other cloud features
—
Licence
GPL-3.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
witness extract: the upload records (written at build by script from the private read) · its README at the package version: the opt-out notification · the package
Ubuntu Pro client (APT news)37.2ubuntu0.1Sends by defaultyes · read in code and in its own unit fileKind of callchecksThe switchpro config set apt_news=false · not tested by usDate checked (UTC)2026-10-10
Version
read at 37.2ubuntu0.1
Group
Ubuntu and the network software around them
Sends by default
yes · read in code and in its own unit file
Kind of call
checks
When and where
on its own; Per its unit file and code: in the background during an apt update, limited to at most one network request per 24 hours. Not wire-checked.; where: vendor API
The switch
pro config set apt_news=false · found in code and documented in the unit; not tested by us
Listens beyond the machine by default
n/a (a system service)
Other cloud features
—
Licence
GPL-3.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the apt hook that starts the news service · the service's own description · the gate on the setting and the 24-hour limit · the default address · the setting's default (on)
uv0.11.27Sends by defaultyes · read in codeKind of callreportsThe switchnone foundDate checked (UTC)2026-10-10
Version
read at 0.11.27
Group
Ubuntu and the network software around them
Sends by default
yes · read in code: in the user agent of every request to a package index
Kind of call
reports
When and where
only when you ask for it; Read in code at 0.11.27: inside the user agent of each request uv makes to PyPI or the index you configure; uv is not a background caller.; where: package index
The switch
none found
Listens beyond the machine by default
n/a (a command-line tool)
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the user agent's fields as uv fills them (the OpenSSL, setuptools and rustc fields are left empty) · the fields added to the user agent of uv's HTTP client
vLLM0.30.0Sends by defaultyes · read in code and in its own documentsKind of callreportsThe switchVLLM_NO_USAGE_STATS=1 · we have not published a test of itDate checked (UTC)2026-10-10
Version
read at 0.30.0
Group
servers and apps you run
Sends by default
yes · read in code and in its own documents
Kind of call
reports
When and where
on its own; The code at v0.30.0 sends the report once at start, then every 10 minutes the same ID and the time; we did not run this version.; where: vendor telemetry collector
The switch
VLLM_NO_USAGE_STATS=1 · found in code and documented; we have not published a test of it
Listens beyond the machine by default
every interface
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the default server address · the switches and the do_not_track file · the 10-minute heartbeat · each report also written to usage_stats.json · its usage-stats page · a random ID, new for each process · the five environment variables it collects · the twenty-six settings passed with the report · vLLM history, 'Who can talk to it'
VoiceStudio0.5.6Sends by defaultchecks: yes · read in code; reports: only if you opt in · read in codeKind of callreports · checksThe switchnone found
HF_HUB_OFFLINE=1 · not tested by us
OMNIVOICE_HF_ENDPOINT_MODE=manual · not tested by us
Settings, Privacy: analytics off · not tested by us
Date checked (UTC)2026-10-10
Version
read at 0.5.6
Group
servers and apps you run
Sends by default
update check: yes · read in code
hf token check: yes · read in code: while a Hugging Face token is on the machine
model host race: yes · read in code
product analytics: only if you opt in · read in code
Kind of call
reports · checks
When and where
update check: on its own; The code at v0.5.6 checks 10 s after launch and every 6 hours after, in packaged builds; not run.; where: code host
hf token check: on its own; The code at v0.5.6 checks each token it finds against Hugging Face and caches the answer for 300 s; how often the app asks again was not re-read here. Not run.; where: model hub
model host race: on its own; The code at v0.5.6 races the two at first run, after a download failure, and when its last decision is older than 7 days; not run.; where: model hub
product analytics: on its own; Once opted in: events as they happen, to PostHog at a host set when the app is built; not run.; where: third-party analytics
The switch
update check: none found
hf token check: HF_HUB_OFFLINE=1 · found in code; not tested by us
model host race: OMNIVOICE_HF_ENDPOINT_MODE=manual · found in code; not tested by us
product analytics: Settings, Privacy: analytics off · found in code; not tested by us
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
AGPL-3.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the check at 10 s and every 6 hours · the release feed addresses · its lockfile pins ONNX Runtime 1.29.0, which this app brings in · the check: the feed, then electron-updater (the releases API is not called) · the check and its 300-second cache · the two addresses, the switch and the 7-day re-race · the ranged download · the module's own description · off unless you say yes, and the backend's kill switch · the stored preference, false by default
Von1.3.5Sends by defaultyes · read in codeKind of callfetchesThe switchHF_HUB_OFFLINE=1 · not tested by us with VonDate checked (UTC)2026-10-10
Version
read at 1.3.5
Group
research engines and model repositories we read
Sends by default
yes · read in code: it downloads its own weights from Hugging Face when they are not on disk
Kind of call
fetches
When and where
as a side effect of a local request; The code at v1.3.5 downloads the files when it loads and finds no local copy; not run.; where: model hub
The switch
HF_HUB_OFFLINE=1 · a huggingface_hub switch; not tested by us with Von
Listens beyond the machine by default
not covered
Other cloud features
—
Licence
Apache-2.0 (read 2026-10-10)
Date checked (UTC)
2026-10-10
Receipt
the download when no local file exists · its own repository name · the wheel's sha256, as PyPI publishes it · our small open deciders measurement (research hub, 2026-09-30), 'What we did not measure'

32 products read or run · calls out found, per kind: 20 reports · 12 fetches · 14 checks · 1 cloud you chose · 5 products where we found none · 3 products whose own code we have not read. Rows are checked against new releases weekly; a row whose code path changes is re-read within 30 days; every row is re-read at least every 90 days. If the oldest "date checked" on this page is older than that, we have slipped, and telling us is the fastest fix.