Privacy & security
openTARS runs on your computer. This page lists everything that can leave it, what stays, and how openTARS keeps risky actions under your control.
What stays on your computer
- The AI models run locally through Ollama. What you type, say and show is processed on your machine.
- No account, no telemetry and no analytics.
- Your chats, memory and settings are files in your home folder. Settings → Memory & privacy shows what openTARS remembers, forgets items one by one and erases everything.
- The log (
~/.tars_log) records the actions taken, in a private folder. It keeps only the length of text typed on your behalf, not the text itself.
What can leave it
- The update check. At most once a day, read-only requests to GitHub (
api.github.com, raw.githubusercontent.com, github.com) to see if there is a new package. Nothing about you is sent besides the request itself. TARS_SEM_AVISO_VERSAO=1 turns it off.
- The cloud, only if you turn it on. The text you write and the screenshots you ask about go to the provider you chose, with your own key or account. The key is stored only on this computer, never shown, never written to the log and never passed to the commands the AI runs. A cloud model is never picked automatically, and the window warns you when your text goes to a provider.
- Model downloads. The installer downloads Gargantua 2 from Ollama.
- Websites you ask for. When you ask openTARS to open or search a site, your browser visits it as usual.
How it stays in your control
- Commands that delete data or change the system (
rm -r, rm with wildcards, find -exec rm, dd, mkfs, git reset --hard, curl | sh, ssh, shutting down) wait for your Allow. These are fixed rules, not AI.
- Commands that ask for a password with
sudo do not hang: they stop and show you the command to run yourself.
- Scheduled routines only delete, send or install if you allowed that when you created them. Anything else makes them stop and tell you.
- Closing a program is like clicking its X: if it asks to save, openTARS does not force it.
This website
This site is a static page hosted on GitHub Pages. It sets no cookies, has no analytics, and loads its fonts, images and video from this same site. GitHub, as the host, may log visits under the GitHub Privacy Statement.
Report a security issue
Write to projectopentars@gmail.com before opening a public issue. Include the openTARS version (opentars --version), your distro, what you did and what happened. Reports are answered as soon as possible, and fixes ship as a new package that installed copies pick up on their own.