Skip to content

v2.70.0 — anonymous opt-IN telemetry

Choose a tag to compare

View all tags
@avelikiy avelikiy released this 13 Jun 09:46
v2.70.0
This tag was signed with the committer’s verified signature.
avelikiy Alex
SSH Key Fingerprint: nD9xQzAb/3YFTUEHwDpi26wMHeq89yGJsV5XW/FadYQ
Verified
Learn about vigilant mode.
1587c9a
This commit was signed with the committer’s verified signature.
avelikiy Alex
SSH Key Fingerprint: nD9xQzAb/3YFTUEHwDpi26wMHeq89yGJsV5XW/FadYQ
Verified
Learn about vigilant mode.

Anonymous, opt-IN CLI telemetry (default OFF, no PII)

Re-introduces usage telemetry after the zero-collection stance of v2.9.2 — strictly opt-in. A fresh install collects nothing until the user enables it.

  • Sent only when opted in: one event per command — { ts, version, command, archetype, node, os, exit_code, duration_ms, anon_id }. No paths, no code, no repo names, no IP, no PII. anon_id = sha256(user@hostname) truncated to 8 hex (not reversible).
  • Toggle: npx great-cto telemetry on|off|status|whoami · GREAT_CTO_TELEMETRY=on · honors DO_NOT_TRACK=1 · auto-skips CI.
  • Server-side guards (Cloudflare Worker + D1): drops IP, rejects unknown keys + non-allowlisted commands, 30-day TTL, /v1/stats public aggregates, /v1/forget RtBF.
  • Policy: docs/PRIVACY.md. Tests: 7 privacy invariants. Verified end-to-end against the live endpoint.
Assets 2
Loading