Privacy Policy

Last updated: March 7, 2026

(S)AGE — (S)overeign Agent Governed Experience is an open-source, local-first AI memory system. This policy covers both the (S)AGE desktop application and the (S)AGE Memory browser extension.

The short version

Your data never leaves your machine. (S)AGE runs entirely on your computer. There are no cloud servers, no accounts, no tracking, and no telemetry. Everything stays local.

What data is stored

• AI memories — stored in a local SQLite database at ~/.sage/ on your computer
• Encryption keys — Ed25519 signing keys generated locally, stored locally
• Extension settings — your (S)AGE server URL (default: localhost:8080), stored in browser local storage

If you enabled encryption during setup, all memories are AES-256-GCM encrypted at rest.

What data is NOT collected

• No personal information
• No browsing history
• No conversation content sent to external servers
• No analytics or telemetry
• No cookies (except a local session cookie for the dashboard)
• No third-party services

Browser extension permissions

• activeTab — to inject the (S)AGE sidebar into AI chat pages
• storage — to save your server URL and cryptographic keys locally in the browser
• scripting — to inject the content script that provides the sidebar and tool integration
• Host access to localhost:8080 — to communicate with your local (S)AGE server
• Host access to chatgpt.com — to inject the content script on ChatGPT pages

Network requests

The only network requests made by (S)AGE are to your own local server at localhost:8080 (or whatever URL you configure). No data is ever transmitted to any external server, cloud service, or third party.

Open source

All source code is publicly available at github.com/l33tdawg/sage under the Apache 2.0 license. You can audit every line of code.

Contact

For questions about this privacy policy, open an issue at github.com/l33tdawg/sage/issues or email l33tdawg@hackinthebox.org.