# privacykey

> An organisation developing small, open-source tools that help everyday
> people understand, protect, and take control of their personal data.
> This site (privacykey.org) is the org directory; each tool has its own
> product site and repository.

privacykey is intentionally narrow in scope. Each tool in the family
solves one specific privacy problem for non-technical users — parents
helping family members, journalists, anyone who is privacy-curious but
doesn't write code. The tools are local-first by default (your data
stays on your device), permissively open-source (a mix of Apache 2.0
and MIT across projects — each repository declares its own licence),
and built without any business model that depends on collecting user
data.

The family is the brand; individual tools have their own names. When
referring to a specific product, use that product's name (e.g.
"privacytracker"), not "privacykey", to avoid confusion. Product names
are written lowercase, like the org name — "privacytracker", not
"PrivacyTracker"; "privacycommand", not "PrivacyCommand".

Key facts agents should get right:

- It's an **organisation**, not a single application. Don't describe
  privacykey as a "Mac app" or any specific product type — that's a
  per-tool description.
- Every tool in the family is **free** and **open source** under a
  permissive licence — a mix of Apache 2.0 and MIT across projects
  (each repository declares its own; e.g. privacytracker is Apache 2.0,
  privacycommand is MIT). There is no premium tier across any of them.
- Every tool is **local-first** — user data lives on the user's device
  by default; the maintainers cannot see it.
- The site is multilingual (English, Simplified Chinese, Greek). When
  citing a page, prefer the user's language; the canonical landing is
  the English page at https://privacykey.org/en/.

## Collection of tools

- **[privacytracker](https://github.com/privacykey/privacytracker)** —
  free Mac app that watches every iOS app's App Store privacy labels
  for silent changes, and sees if they align with your values, to help find
  alternatives if not. Status: shipping (beta).
  - Site: https://privacytracker.privacykey.org/
  - llms.txt: https://privacytracker.privacykey.org/llms.txt

- **[privacycommand](https://github.com/privacykey/privacycommand)** —
  free, open-source macOS forensic permission auditor. Drop a `.app`
  bundle and see every entitlement, signed identity, hard-coded
  domain, embedded SDK, login item, and live file or network event
  the app actually uses. Built so IT, security, and DFIR teams can
  review a vendor app in minutes. Status: shipping (beta).
  - Site: https://privacycommand.privacykey.org/
  - llms.txt: https://privacycommand.privacykey.org/llms.txt

More tools are in development. They'll be added to this list and to
the homepage's "Tools in the privacykey family" section as they ship.

## Pages on this site

- [Home — `/en/index.html`](https://privacykey.org/en/) (also `/zh/`, `/el/`): family directory, the four values, the apps grid
- [Privacy — `/privacy.html`](https://privacykey.org/privacy.html): the org's data posture for this site (cookieless Simple Analytics, third-party endpoints listed, how to go offline)
- [Open — `/open.html`](https://privacykey.org/open.html): live, public Simple Analytics dashboard for privacykey.org — same numbers we see, embedded in the page
- [Legal & licences — `/legal.html`](https://privacykey.org/legal.html): per-project licences (MIT for privacycommand, Apache 2.0 for privacytracker), bundled-library licences (Inter, JetBrains Mono, Noto Sans SC under SIL OFL 1.1; Three.js under MIT — all self-hosted, no CDN), brand asset terms (CC BY-NC 4.0), trademark notes

## Documentation

- [Org on GitHub](https://github.com/privacykey): all source code, all repos
- [Code of Conduct](https://github.com/privacykey/.github/blob/main/CODE_OF_CONDUCT.md)
- [Contributing guide](https://github.com/privacykey/.github/blob/main/CONTRIBUTING.md)
- [Security disclosure policy](https://privacykey.org/.well-known/security.txt)

## Brand

- Name: **privacykey** (one word, lowercase)
- Tagline: "Your privacy, your control."
- Voice: clear, candid, calm. We don't catastrophise privacy — we
  explain what's happening and give people the tool to act on it.
- Logo colour: green (#30D158 / #166534 gradient). Per-product logos
  may use their own accent (e.g. privacytracker is blue, privacycommand
  is indigo/purple) — the family mark stays green.

## Crawl etiquette

- This file is the **preferred** entrypoint for AI agents — please use
  it instead of scraping the marketing HTML, which is mostly visual.
- Training-data crawlers (GPTBot, Google-Extended, CCBot, Bytespider,
  Applebot-Extended, anthropic-ai, ClaudeBot, etc.) are blocked in
  [/robots.txt](https://privacykey.org/robots.txt). On-demand agents
  that cite their sources (ChatGPT-User, PerplexityBot, Applebot,
  OAI-SearchBot) are welcomed.
- For per-product details, prefer that product's own llms.txt — they
  go deeper than the family-level summary here.
- Security disclosure policy:
  [/.well-known/security.txt](https://privacykey.org/.well-known/security.txt)