Privacy Notice

Last updated: 27 May 2026

Bouclier.ai is a research prototype. It is not a commercial product.

The Software and the Site are published for evaluation, security research, academic study, and personal experimentation only. The privacy posture described below reflects this status and does not constitute a commercial data-processing offering. See the Terms of Use for the full prototype framing.

Bouclier.ai runs entirely on your device — the gateway only ever touches a request when a managed secret's real value is present, scrubbing it before it reaches the model. The app collects no personal data, has no analytics, no crash reporting, and no user accounts. The only information that ever reaches a bouclier.ai server is a single anonymous timestamp when you click the Download button on this marketing site — full scope described below.

What Bouclier.ai does

Bouclier.ai runs a local gateway on your Mac. You point your AI agent's SDK at it (ANTHROPIC_BASE_URL / OPENAI_BASE_URL) instead of the provider directly; the gateway re-issues each request to the real provider over TLS and streams the response back. There is no system-wide traffic interception, no certificate authority, and no decryption of traffic the gateway wasn't explicitly pointed at. Text prompt bodies and request headers are forwarded byte-for-byte; the only content the Software ever modifies is a managed secret's real value, which is scrubbed to a placeholder on the way out (see "What reaches the model" on the homepage) and restored in the response.

Providers reached

The gateway routes requests to whichever provider the request targets. Built in:

api.openai.com, api.anthropic.com

Organizations using MDM can override the upstream host/port via managed app configuration.

Network connections

AI API forwarding— forwarding your requests to their intended destination. A managed secret's real value is scrubbed to a placeholder before the request leaves the gateway and restored in the response; nothing else is modified.
Update check — checking for software updates via appcast.xml hosted on bouclier.ai. Transmits app version, macOS version, CPU architecture, and preferred language. No personal data or request content.
SIEM webhook (enterprise only)— if and only if configured by an organization's IT administrator via MDM, secret-keeper event metadata (timestamp, host, event kind) is sent to that organization-controlled endpoint. Never enabled by default. Cannot be configured by the user.

Marketing site (bouclier.ai)

When you click the "Download" button on bouclier.ai, the server records a single anonymous event consisting of (a) the time of the click, (b) the requested app version, and (c) the channel string(e.g. "site") that the link carries. That's it.

We do not record, store, or transmit:

your IP address;
your user-agent string or device fingerprint;
the referring page or any UTM parameter;
your country or any geolocation derived from the request;
any cookie, session token, or other identifier.

The event is recorded so we can see whether anyone is downloading the beta. It cannot be linked back to you. The marketing site does not use Google Analytics, Plausible, PostHog, Mixpanel, Segment, Fathom, or any equivalent product analytics tool, and never has.

Data stored locally

Stored at ~/Library/Application Support/ai.bouclier.app/:

Scan logs — timestamp, source, target host, event kind, request size. No request body content. Auto-deleted after 30 days.
Daily stats — date, requests scanned, secrets scrubbed/blocked. Retained 365 days.
Managed secret values — macOS Keychain (encrypted at rest), kSecAttrAccessibleWhenUnlockedThisDeviceOnly. Never written to disk in plaintext, never logged.
Preferences — gateway port, notifications, launch-at-login. Via UserDefaults.

Data we collect

None. Bouclier.ai has no user accounts, no analytics, no crash reporting, and no usage telemetry.

Data we share

None. The SIEM webhook feature sends metadata to infrastructure controlled by the organization's IT administrator, not to Bouclier.ai or any third party.

Secret scrub / restore method

A managed secret's real value is detected by exact match against the value you stored in Keychain (not a heuristic or classifier) and replaced with an opaque placeholder before the request reaches the model provider. The matching response is scanned for the placeholder and restored to the real value so your local tools keep working. Requests and responses containing no managed secret value are forwarded byte-for-byte, untouched.

Text prompt bodies and HTTP request headers are otherwise forwarded byte-for-byte; the Software does not modify outbound prompts or headers beyond the secret-scrub substitution described above. This is pinned by an end-to-end test in the public repository.

An earlier version of the Software additionally ran an on-device prompt-injection and attachment-PII detection engine. That engine is no longer wired into any live request path — its code remains in the public repository, unmodified, but does not run against your traffic today.

Auditing

The Software is open source under Apache 2.0; the entire codebase, including the regex patterns, the on-device classifier integration, and the test suite, is published at github.com/SuperstellarLLC/bouclier-ai. You can audit, fork, rebuild, and verify the behaviour of every component. No additional commercial audit programme is offered.

Your rights

Because no personal data is collected by the Software or transmitted to any Bouclier.ai-controlled server, there is no profile, account, or stored record we could give you access to, rectify, port, or erase on your behalf. The data the Software generates lives on your device and is fully under your control: stored under ~/Library/Application Support/ai.bouclier.app/ and removable at any time by uninstalling the app or by deleting the application support directory.

For data subjects in Switzerland (revised FADP) and the European Economic Area (GDPR), the rights of access, rectification, deletion, restriction of processing, objection, and data portability formally apply to any personal data we hold — which, as described above, is none beyond a single anonymous click event on the Site. You may nevertheless contact us using the address below to confirm this status.

Children

The Software is not directed at children under the age of sixteen (16). We do not knowingly collect data from anyone, including children.

Sub-processors

The Site is hosted on Vercel Inc. infrastructure. Vercel may, in the ordinary course of delivering web pages, log standard HTTP request metadata at its edge nodes (transit IP, request path, status code, timestamp) for periods set by its own policy. We do not aggregate, analyse, or persist that data on our side. No other sub-processor receives any information generated by the Software or the Site.

Governing law and exclusive jurisdiction

This Notice is governed by Swiss law. Any dispute arising out of or relating to the processing of personal data described in this Notice shall be subject to the exclusive jurisdiction of the ordinary courts of the Canton of Zug, Switzerland, save that any non-waivable right granted to a data subject by mandatorily-applicable consumer or data-protection law of the subject's habitual residence is preserved.

Changes to this Notice

We may update this Notice at any time by publishing a revised version on the Site. The "Last updated" date above identifies the current version. Material changes affecting how personal data is processed will be summarised in the project changelog and, where reasonably practicable, surfaced in the in-app "What's new" sheet shown on first launch of a new version.

Contact

Privacy: privacy@bouclier.ai

Support: support@bouclier.ai

Postal address for written privacy requests will be provided on request.