Privacy
What the LocalPilot extension sends and to whom, what stays on your disk, and what this website collects. Two separate answers, stated plainly.
LocalPilot has two parts with different privacy behaviour: the extension you install in VS Code, and this website. They are answered separately below. For what the agent can do on your machine and how it is limited, see Security.
The extension
Where your code and prompts go
Only to the model servers listed in localpilot.providers. The defaults are all on localhost:
| Server | Default address |
|---|---|
| Ollama | http://localhost:11434 |
| LM Studio | http://localhost:1234/v1 |
| llama.cpp | http://localhost:8080/v1 |
| vLLM (or colibri) | http://localhost:8000/v1 |
Auto-detection also probes a few other local ports and running Docker containers. It only adds servers that answer on your machine. If you add a remote endpoint yourself, your prompts go there.
Other network requests
| Request | When | How to turn it off |
|---|---|---|
| Skill registry index (names and descriptions) from GitHub | At most once a day, when skills auto-install is on | localpilot.skills.autoInstall: off |
| Web search and web fetch tools | When the agent calls them | localpilot.approvals.network (ask to approve each, never to block) |
| Model downloads | Only when you start one (setup, catalog, gallery) | Don’t start one |
| MCP servers | Only servers you configure | Remove them from localpilot.mcpServers |
There is no account, no analytics SDK and no update check in the extension. Extension updates come from VS Code itself, the same as for any other extension.
What stays on your disk
- Usage metrics for the Dashboard and model tuning: model calls, tokens, latency, tool runs, agent turns, completion acceptance. They are daily JSONL files in
~/.localpilot/telemetry, kept forlocalpilot.telemetry.retentionDays(default 30). Nothing reads them except LocalPilot on your machine. Turn recording off withlocalpilot.telemetry.enabled: false, or delete everything from Dashboard → Delete all recorded data. - Chats, memory notes and checkpoints in VS Code’s extension storage and in
.localpilot/inside your project.
How to check this yourself
- Disconnect from the network. Chat, edits, tests and completions keep working against a local model.
- Open Settings → Providers and confirm every address is one you expect.
- Read the source on GitHub. The network code is in
src/providers/,src/tools/web.ts,src/agent/skillCatalog.tsandsrc/mcp/.
This website
This site (https://isathish.github.io/localpilot) is hosted on GitHub Pages and does use tracking:
- Google Analytics records page views. It also records clicks on the Install, Download VSIX and GitHub links, and the “Ask AI” buttons, so we can tell which pages help people get started.
- Google Fonts serves the site’s fonts, so your browser requests them from Google.
- GitHub Pages keeps standard server logs, under GitHub’s privacy statement.
None of this touches the extension. Blocking analytics in your browser has no effect on LocalPilot.
Questions or concerns: open an issue.