Porcelain runs on machines you control. It has no analytics, no telemetry, and no account to sign into.
Your code never leaves your machine.
The only product network request the app makes for itself is the auto-update check (GitHub Releases via electron-updater), on launch and periodically. You choose whether to install.
If you run coding agents, those tools use your credentials and their own network paths. Porcelain does not run, launch, or authenticate them, and it does not proxy or store those conversations on our servers. We have none for that purpose.
If you enable a remote daemon (LAN or tailnet), traffic stays between devices you configure. Token-gated; you own the host.
App preferences, review sets, comments, board cards, notes, and saved actions live under your user data directories and ~/.porcelain/ on the machine running the daemon. Repositories stay where you put them. Nothing is uploaded to Porcelain as a service.
Open an issue on GitHub. The product is open source. You can verify these claims in the code.