Privacy Policy

Last updated: August 13, 2026

(S)AGE — (S)overeign Agent Governed Experience is an open-source, local-first AI memory system. This policy covers both the (S)AGE desktop application and the (S)AGE Memory browser extension.

The short version

Your data stays local by default. (S)AGE runs on your computer with no required SAGE cloud account or product telemetry. Data leaves the node only when you explicitly configure federation, synchronization, an AI connector, an external embedding or reranking provider, or another network integration.

What data is stored

• AI memories — stored in local BadgerDB/SQLite stores at ~/.sage/ on your computer
• Encryption keys — Ed25519 signing keys generated locally, stored locally
• Extension settings — your (S)AGE server URL (default: localhost:8080), stored in browser local storage

If you enabled encryption during setup, all memories are AES-256-GCM encrypted at rest.

What data is NOT collected

• No personal information
• No browsing history
• No conversation content sent to external servers
• No analytics or telemetry
• No cookies (except a local session cookie for the dashboard)
• No required third-party service; optional integrations contact only the services you configure

Browser extension permissions

• activeTab — to inject the (S)AGE sidebar into AI chat pages
• storage — to save your server URL and cryptographic keys locally in the browser
• scripting — to inject the content script that provides the sidebar and tool integration
• Host access to localhost:8080 — to communicate with your local (S)AGE server
• Host access to chatgpt.com — to inject the content script on ChatGPT pages

Network requests

By default, (S)AGE talks to your own local server at localhost:8080 (or the URL you configure). Optional federation, synchronization, Cloudflare tunnel, ChatGPT connector, embedding, and reranking flows make the network requests required by those features. Federation relays carry encrypted traffic but can observe connection metadata. The SAGE project does not receive your memory contents merely because you run a node.

Open source

All source code is publicly available at github.com/l33tdawg/sage under the Apache 2.0 license. You can audit every line of code.

Contact

For questions about this privacy policy, open an issue at github.com/l33tdawg/sage/issues or email l33tdawg@hackinthebox.org.