Privacy Notice

Last updated: 27 May 2026

Bouclier.ai is a research prototype. It is not a commercial product.

The Software and the Site are published for evaluation, security research, academic study, and personal experimentation only. The privacy posture described below reflects this status and does not constitute a commercial data-processing offering. See the Terms of Use for the full prototype framing.

Bouclier.ai runs entirely on your device and inspects your AI traffic locally. It never transmits your prompts or responses automatically — no analytics, no crash reporting, no user accounts, nothing gathered in the background. Data reaches a bouclier.ai server in only three narrow, non-sensitive cases: the app checks for its own updates (fetching our signed release feed); an anonymous timestamp is recorded when you click Download on this site; and, only if you explicitly choose to, a redacted false-positive report that you review in full before it is sent. Full scope described below.

What Bouclier.ai does

Bouclier.ai runs a local gateway on your Mac. You point your AI agent's SDK at it (ANTHROPIC_BASE_URL / OPENAI_BASE_URL) instead of the provider directly; the gateway re-issues each request to the real provider over TLS and streams the response back. There is no system-wide traffic interception, no certificate authority, and no decryption of traffic the gateway wasn't explicitly pointed at. Text prompt bodies and request headers are forwarded byte-for-byte; the Software never modifies a request. It either forwards it unchanged or, when injection is detected in untrusted content and blocking is enabled, refuses it locally with a 422.

Providers reached

The gateway routes requests to whichever provider the request targets. Built in:

api.openai.com, api.anthropic.com

Organizations using MDM can override the upstream host/port via managed app configuration.

Network connections

AI API forwarding — forwarding your requests to their intended destination, byte-for-byte. Nothing is modified; a request is either forwarded unchanged or refused locally.
Update check — checking for software updates via appcast.xml hosted on bouclier.ai. Transmits app version, macOS version, CPU architecture, and preferred language. No personal data or request content.
SIEM webhook (enterprise only) — if and only if configured by an organization's IT administrator via MDM, detection event metadata (timestamp, host, event kind) is sent to that organization-controlled endpoint. Never enabled by default. Cannot be configured by the user.

Marketing site (bouclier.ai)

When you click the "Download" button on bouclier.ai, the server records a single anonymous event consisting of (a) the time of the click, (b) the requested app version, and (c) the channel string (e.g. "site") that the link carries. That's it.

We do not record, store, or transmit:

your IP address;
your user-agent string or device fingerprint;
the referring page or any UTM parameter;
your country or any geolocation derived from the request;
any cookie, session token, or other identifier.

The event is recorded so we can see whether anyone is downloading the beta. It cannot be linked back to you. The marketing site does not use Google Analytics, Plausible, PostHog, Mixpanel, Segment, Fathom, or any equivalent product analytics tool, and never has.

Data stored locally

Stored at ~/Library/Application Support/ai.bouclier.app/:

Scan logs — timestamp, source, target host, event kind, request size. No request body content. Auto-deleted after 30 days.
Block samples (opt-in, off by default) — only when you enable "Capture blocked content for tuning": the offending untrusted span excerpt, the per-signal breakdown, and the passage the classifier reacted to, stored in a local file (block-samples.jsonl). Never transmitted unless you explicitly tap "Report false positive" (see "Data we share").
Daily stats — date, requests inspected, injections blocked. Retained 365 days.
Preferences — gateway port, notifications, launch-at-login. Via UserDefaults.

Data we collect

None by default. Bouclier.ai has no user accounts, no analytics, no crash reporting, and no passive telemetry. The one exception is entirely user-initiated: if you tap "Report false positive" on a block, a redacted copy of that single flagged span is sent to us (see "Data we share"). Nothing is collected unless you take that action.

Data we share

Nothing automatically. The SIEM webhook feature sends metadata to infrastructure controlled by the organization's IT administrator, not to Bouclier.ai or any third party.

The one thing shared with Bouclier.ai is a false-positive report you explicitly send. Tapping "Report false positive" on a block transmits a redacted copy of that one flagged span — secrets and PII scrubbed on your Mac, and shown to you in full for review before anything is sent — to bouclier.ai so we can tune the detector and stop blocking legitimate content. The report carries the matched pattern names, the signal scores, and the redacted excerpt; it does not carry your IP address, user-agent, or any identifier. Nothing is sent unless you tap the button and confirm.

Injection inspection method

The Software inspects request bodies on-device for prompt-injection patterns in untrusted content (tool results and other model-visible text the agent fetched itself). Inspection reads the request in memory for the duration of that request; it never stores or transmits it. When injection is detected and blocking is enabled, the request is refused locally with a 422 — it never leaves your machine. Otherwise the request is forwarded byte-for-byte.

Text prompt bodies and HTTP request headers are forwarded byte-for-byte; the Software does not modify outbound prompts or headers at all. A request is delivered unchanged or refused, never rewritten. This is pinned by an end-to-end test in the public repository.

The attachment-PII detection engine described in earlier versions of this policy is not on any live request path.

Auditing

The Software is open source under Apache 2.0; the entire codebase, including the regex patterns, the on-device classifier integration, and the test suite, is published at github.com/SuperstellarLLC/bouclier-ai. You can audit, fork, rebuild, and verify the behaviour of every component. No additional commercial audit programme is offered.

Your rights

Because no personal data is collected by the Software or transmitted to any Bouclier.ai-controlled server, there is no profile, account, or stored record we could give you access to, rectify, port, or erase on your behalf. The data the Software generates lives on your device and is fully under your control: stored under ~/Library/Application Support/ai.bouclier.app/ and removable at any time by uninstalling the app or by deleting the application support directory.

For data subjects in Switzerland (revised FADP) and the European Economic Area (GDPR), the rights of access, rectification, deletion, restriction of processing, objection, and data portability formally apply to any personal data we hold — which, as described above, is none beyond a single anonymous click event on the Site. You may nevertheless contact us using the address below to confirm this status.

Children

The Software is not directed at children under the age of sixteen (16). We do not knowingly collect data from anyone, including children.

Sub-processors

The Site is hosted on Vercel Inc. infrastructure. Vercel may, in the ordinary course of delivering web pages, log standard HTTP request metadata at its edge nodes (transit IP, request path, status code, timestamp) for periods set by its own policy. We do not aggregate, analyse, or persist that data on our side. No other sub-processor receives any information generated by the Software or the Site.

Governing law and exclusive jurisdiction

This Notice is governed by Swiss law. Any dispute arising out of or relating to the processing of personal data described in this Notice shall be subject to the exclusive jurisdiction of the ordinary courts of the Canton of Zug, Switzerland, save that any non-waivable right granted to a data subject by mandatorily-applicable consumer or data-protection law of the subject's habitual residence is preserved.

Changes to this Notice

We may update this Notice at any time by publishing a revised version on the Site. The "Last updated" date above identifies the current version. Material changes affecting how personal data is processed will be summarised in the project changelog and, where reasonably practicable, surfaced in the in-app "What's new" sheet shown on first launch of a new version.

Contact

Contact: apps@superstellar.io

Postal address for written privacy requests will be provided on request.