Privacy

The keys never leave the house.

A weaver who sells the pattern is no weaver at all. What KeyWeaver knows about your machines is written on your machines, readable by you alone.

01The whole policy

No accounts

There is nothing to sign up for. Your identity is an Ed25519 keypair generated on your own machine; KeyWeaver has no user table to put you in.

No telemetry

No analytics, no crash reporters, no usage pings. If the loom misbehaves, tell us by mail; it will not tell on itself.

One local ledger

Processes, logs, and history live in a SQLite database inside .kpm. Delete the folder and the ledger is gone.

Sync without sight

When machines sync through the depot, the server stores ciphertext it cannot read. Encryption keys are derived on your devices and stay there.

A coordinator you can own

Enrollment and relay go through a coordinator, and you are free to run your own. Either way it brokers introductions; your traffic rides WireGuard between your nodes.

Questions about any of this belong at [email protected].