Privacy and analytics

Pane runs on your machine. Your code never leaves your machine because of Pane. It only leaves when the agents you run send context to their own providers.

This page explains the product facts. It is not a full legal contract.

what pane does not collect

analytics

Product analytics are on by default. Pane uses PostHog to record which features are used and your OS and app version. If it finds them on your machine, it ties those events to your GitHub username, or your git email or name. The website records page views on runpane.com.

Since Pane v2.4.170, routine RunPane command starts and successes don't send analytics. Sanitized failures, download and fallback events remain. App error reports are limited in frequency and contain fixed messages and relative app stack frames. They exclude raw messages, terminal content, prompts, command arguments, absolute paths and environment values. PostHog's executable code is bundled with the app; remote SDK extensions, including session replay, can't load.

To opt out in the app, open Settings > Privacy and turn off Allow product analytics. Pane sends an identified opt-out marker, then discards queued usage and stops later product analytics, including app error reports. Your earlier opt-out stays in effect when you update.

remote pane

Remote Pane is opt-in. It connects to a daemon you run on your own machine, VM, WSL box, or server. Your code stays on that host.

Read the full security and permissions docs.