Privacy and security

Your files and server details never leave your network.

Leaves your computer

In the beta, the app sends nothing anywhere: no telemetry, no automatic update check and no licence call. It only talks to the Perforce servers you configure.

This website has no forms. If you open an issue on GitHub, GitHub receives what you write and your GitHub account name, under GitHub's own privacy terms. Downloads are served by GitHub too, so GitHub sees the download request. The site itself sets no cookies and has no analytics, outside scripts or outside fonts. It keeps one thing in your browser's storage, your choice of light, dark or system theme, and that never leaves your browser.

Later, when licence checks go live: the licence id, the app version, a one-way device hash and a seat count, every few days. We will say so here first.

Never leaves your computer

Your files, file names and paths.

Server addresses, user names, changelist descriptions and logs. A feedback bundle is built on your computer, shown to you, and saved for you to send yourself.

Security

Passwords are never stored. They are passed once to the free p4 client and wiped from memory; the server's login ticket is kept by p4 in its own file.
3D models open in a separate, sandboxed viewer that cannot reach the app, your files or the network.
Other programs are started only from a fixed list, with a read-only copy of the file and a time limit.
Every download has a SHA-256 checksum on the download page. The installers are not code-signed yet; signed installers come with the first public release.
Safety copies of files, kept 14 days, are encrypted with a key held by your operating system.