The website
The website does not include advertising trackers, behavioral analytics, account registration, or analytics cookies. When the first-party download service is enabled, it publishes one aggregate: the number of installer requests accepted by the CEX download route.
When enabled, the download metric stores the requested artifact, an aggregate count, and the time of the latest request. It does not store an IP address, user agent, referrer, cookie, or stable visitor identifier in the metric dataset. The number is therefore not a unique-person count and does not prove that every transfer completed or was installed.
The public website is hosted by Vercel at cexrun.com. The site requests the CEX page and a Google-hosted brand font. Release files and the aggregate count will use the applicable first-party or release host once those services are enabled. These requests necessarily expose ordinary network information such as your IP address and browser details to the relevant hosting provider and its normal server logs.
The desktop beta
The packaged beta starts with fresh local data stores. Runtime memory, workspace files, configuration, and credentials remain on the computer where CEX runs unless you choose an action that sends data elsewhere.
CEX does not bundle the developer's working databases into a release. Uninstalling the application may not remove every local workspace or runtime-data directory; review local files before discarding a machine or account.
Anonymous usage metrics do not include prompts, conversations, files, memories, credentials, API keys, generated work, or file contents.
Anonymous usage metrics
You can choose to share four narrow facts from Settings: a session started, visible active minutes, the CEX version, and the operating-system family. The app sends no stable installation ID and the first-party metric store keeps aggregate counts rather than person-level event histories.
The metric store does not retain IP addresses, user agents, referrers, account IDs, or cookies. Ordinary network requests can still expose an IP address and request metadata to the hosting provider and its short-lived server logs. Turning the setting off stops new usage events.
Crash reports
Automatic crash upload is off by default and is unavailable unless a desktop release has a configured crash-report endpoint. If available, you must turn it on separately in Settings.
A crash report contains a technical minidump, CEX version, Electron version, operating system, and process type. Minidumps can include fragments of process memory, so they may contain information that was in memory when the crash occurred even though CEX does not intentionally attach prompts or files. Use Feedback instead if you prefer to review and redact what you send.
Models, connectors, and tools
If you connect a cloud model or outside service, or approve a tool that accesses the network, the content required for that action can be sent to that provider. The provider handles that data under its own privacy terms and account settings.
CEX does not operate Ollama, llama.cpp, model-provider APIs, GitHub, Google Fonts, or other services you choose to connect. Review the destination and requested permission before approving an action.
Email and feedback
Feedback is separate from usage metrics. When you press Send, CEX saves the feedback locally and, when the hosted inbox is configured, sends the rating or report, environment fields shown in the form, and any logs, screenshots, or contact address you chose to add. Anonymous feedback omits the contact field.
If you email hello@cex.app, the message can contain your email address, message text, and attachments. Do not send passwords, API keys, access tokens, private model credentials, or unredacted workspace data.
Changes to this page
This notice will be updated before CEX adds new categories of product analytics, accounts, payments, or other data collection. Material changes will be reflected by the updated date below.
Questions or deletion requests can be sent to hello@cex.app. A retention period and operator identity must be added before public crash uploads are enabled.
Effective August 19, 2026