Docs

Privacy and telemetry

What leaves the machine during scans, license checks, website visits, and CLI usage.

Summary

Privacy and telemetry

What leaves the machine during scans, license checks, website visits, and CLI usage.

Source stays local

Radar does not upload repository source, snippets, file contents, SARIF, JSON, or HTML reports. Scans run in the local workspace or inside the GitHub Actions runner.

License and product metadata

License validation sends entitlement identifiers, activation identifiers, machine fingerprint hashes, optional repository fingerprints for CI, client version, platform, and command metadata. Analytics events use counts and scores, not source paths or source text.

Opt out

CLI telemetry is disabled when standard Do Not Track is set or when Radar telemetry is explicitly off.

DO_NOT_TRACK=1 radar scan . --quick
RADAR_TELEMETRY=0 radar scan . --quick