Privacy Policy

Last updated: March 7, 2026

(S)AGE — (S)overeign Agent Governed Experience is an open-source, local-first AI memory system. This policy covers both the (S)AGE desktop application and the (S)AGE Memory browser extension.

The short version

Your data never leaves your machine. (S)AGE runs entirely on your computer. There are no cloud servers, no accounts, no tracking, and no telemetry. Everything stays local.

What data is stored

AI memories — stored in local BadgerDB/SQLite stores at ~/.sage/ on your computer
Encryption keys — Ed25519 signing keys generated locally, stored locally
Extension settings — your (S)AGE server URL (default: localhost:8080), stored in browser local storage

If you enabled encryption during setup, all memories are AES-256-GCM encrypted at rest.

What data is NOT collected

No personal information
No browsing history
No conversation content sent to external servers
No analytics or telemetry
No cookies (except a local session cookie for the dashboard)
No third-party services

Browser extension permissions

activeTab — to inject the (S)AGE sidebar into AI chat pages
storage — to save your server URL and cryptographic keys locally in the browser
scripting — to inject the content script that provides the sidebar and tool integration
Host access to localhost:8080 — to communicate with your local (S)AGE server
Host access to chatgpt.com — to inject the content script on ChatGPT pages

Network requests

By default, (S)AGE talks to your own local server at localhost:8080 (or whatever URL you configure). Optional connector flows you configure, such as Cloudflare tunnel or ChatGPT connector setup, make only the network requests needed for that feature. The SAGE project does not receive your memory contents.

Open source

All source code is publicly available at github.com/l33tdawg/sage under the Apache 2.0 license. You can audit every line of code.

Contact

For questions about this privacy policy, open an issue at github.com/l33tdawg/sage/issues or email l33tdawg@hackinthebox.org.