autograph collects no user data. All state (keys, profiles, permission grants) is stored locally in the browser and never transmitted anywhere. No telemetry, no analytics, no remote endpoints. Full policy: https://buildtall.systems/autograph/privacy