Privacy

Last updated: 2026-09-06.

Local-first by design

CodeVetter is a native macOS app. Reviews run on your machine. The repo you point it at, the diff being reviewed, your notes, and the review history all live in a local SQLite database in the app data directory. None of that goes to a CodeVetter-owned server — there isn't one.

What hits third parties

• The LLM provider you configure. When you run a review, CodeVetter sends your code + the review prompt to whichever provider (Anthropic, OpenAI, OpenRouter, your own gateway) you've picked. Their privacy policy applies.
• Auto-updater. The app checks GitHub Releases for new versions. That request includes your platform string and the current version. Disable in settings if you prefer.

API keys

Provider API keys are yours and stay on your machine. CodeVetter reads them from your local application settings or from the environment it is launched with; they are never transmitted to CodeVetter, and they leave your machine only inside the Authorization header of a request you initiate to the provider you chose.

Crash and usage telemetry

None by default. The first launch does not phone home; there is no anonymous usage analytics endpoint baked into the app.

Public website analytics

The public codevetter.com marketing and benchmark pages use PostHog and Microsoft Clarity to understand page visits and interactions. Those pages have no repository upload or CodeVetter account surface. This does not add telemetry to the desktop application.

Deletion

Uninstall the app and delete the data directory (~/Library/Application Support/CodeVetter on macOS) to remove all local state.