Last updated 2026-10-20

LYGO Local — Privacy Notice

This notice covers the LYGO Local harness and local browser console. It does not replace the excavationpro.ca site privacy policy for the public website.

The short version

• The Phase 1 harness runs on your machine and binds only 127.0.0.1.
• Prompts go to the engine you select on your own machine.
• Prompts and answers are not uploaded to excavationpro.ca.
• No chat history is written to disk by the harness.
• No analytics or telemetry is sent by the harness.
• The public portal relay is Phase 2 and is not active in this build.

What the harness reads

It reads the model list from known loopback AI endpoints and, if present, a local %LOCALAPPDATA%\LYGO\engines.json file that you create. It does not scan your LAN, your files, your browser history, or the public internet.

What leaves your machine

Your prompt is sent only to the local engine you select. That engine may itself call external services if it is configured to do so; those calls are between you and that engine. LYGO Connect does not add a cloud call.

What is stored

The harness does not write prompts or answers to disk. The browser tab holds the current answer in memory. Startup and engine-status messages may be written to the console or a local log for diagnostics. You can delete the install directory at any time.

Public portal (Phase 2)

When pairing is enabled, a local connector will open an outbound connection to a relay and exchange a one-time pairing code and session token. The relay will route requests between your browser and your local engine. A WebSocket relay can technically see message contents; a WebRTC path can be end-to-end between browser and local engine. The pairing screen will state which mode is in use before you connect. No public relay is active in Phase 1.

Website and downloads

The public pages use Google AdSense on the portal and site. AdSense and the site host may process standard web request data under their own policies. Model downloads from Hugging Face are governed by Hugging Face and the model authors. The LYGO Local installer will publish a SHA-256 and a signing identity; verify both before running it.

Security

The local API is token-gated, bound to loopback, and has no CORS access. Report a vulnerability through security.txt or contact. Do not test against systems you do not own.

Contact

Privacy questions: excavationpro.ca/contact.html. Steward: Justin Helmer / Excavationpro.

This is a product privacy notice, not legal advice. The public site privacy policy and portal legal page also apply.