QuietStewardship
All legal & trust documents

Agent Data-Handling & Transparency

A plain-language inventory of what the local agent reads from your machine, what it keeps on your disk, and — importantly — what it never does. Most vendors don't publish a 'what we don't collect' list. We do.

Last updated June 13, 2026

What the agent reads (from your machine)

The agent reads standard operating-system diagnostics and recent local activity:

  • System: OS name/version, architecture, hostname, system uptime.
  • Processor: CPU model, core count, and utilization / load averages.
  • Memory: total / used / free.
  • Storage: per-volume total / used / free.
  • Network interfaces: interface names and a count of bound addresses (not the addresses’ contents).
  • Recent activity: last boot time and a best-effort list of running processes (name, PID, CPU%).

What it stores (on your disk only)

  • In on-demand mode: nothing is persisted. The agent reads live values and serves them to your dashboard while you look.
  • In background mode (opt-in): the agent records periodic snapshots of the headline metrics above into a local database file in your user data folder, so you can review the last hour, 12 hours, 24 hours, or a custom range. A retention limit (14 days by default) prunes older samples. You can open the data folder, change retention, or delete everything at any time.

What it never does

  • No outbound connections. The agent binds to loopback (127.0.0.1) only and never initiates a connection to the internet.
  • No transmission to us or to any third party. Your data is not uploaded, synced, or backed up to a cloud.
  • No file contents, documents, keystrokes, screen contents, passwords, or browsing history.
  • No microphone, camera, or location access.
  • No advertising identifiers or telemetry.

How your browser reaches the agent

The agent serves HTTPS on localhost using a self-signed certificate generated on your machine. A strict Content-Security-Policymeans the dashboard can only connect to your loopback address and this site — never to a third party. The agent restricts which web origins may read it (a CORS allowlist) and supports an optional pairing token for extra hardening.

Modes & control

  • On-demand: run the agent only while you’re viewing your data; nothing is stored.
  • Background service: opt-in, consented (see the Consent Notice); collects on an interval you control and prunes by your retention setting.
  • Pause/resume collection from the system-tray menu; uninstall removes the agent and you can delete the data folder.

Verify it

You don’t have to take our word for any of this — the Verify it yourself page shows how to confirm the agent makes no outbound connections and that the dashboard works with your network turned off.

This document is provided in good faith and modeled on common industry practice. It is not legal advice; QuietStewardship recommends review by qualified counsel before you rely on it. We’ll keep it current as the product evolves.