No cookies, no tracking
No analytics scripts, no advertising pixels, no external fonts. Only when you switch the language does your browser remember that choice locally — otherwise the website stores nothing on your device.
Security & privacy
Trust comes from verifiable rules, not from promises.
Here is what we concretely do — for this website and for the product. What is not stated here, we do not claim.
This website
Little surface, no observation
Strict security headers
A Content-Security-Policy without third-party scripts, no embedding in other sites, only the origin without a path as referrer to other sites, HSTS.
Server-side validation
The sign-up for the relaunch notification is validated and rate-limited on the server. The form works without JavaScript.
No account system
There is no login and no stored credential on this website.
Undernap
Authority, evidence, limits
Undernap is a local macOS app. These rules are part of the product, not of the marketing.
Local on your Mac
Project knowledge, missions and results live in a local data directory. There is no service of ours that your work runs through.
Your own AI accounts
Undernap uses the connections you make. We do not see your credentials; they leave your machine only towards the provider they belong to.
Nothing without an approved plan
A mission only starts once you have approved its plan. Read-only requests stay read-only.
Bounded outbound connections
A mission only talks to the providers its plan foresees. Your accounts’ capacity limits are respected, never circumvented.
Graded evidence
Observed, derived, inferred or unknown — every statement carries its kind.
Independent completion
Whether a mission is done is checked against the goal by a separate instance. “Done” is a verification result, not a self-report.
A licence through your account
You connect a Mac with a short code in your account. The app confirms its licence about once a day over the internet and keeps working for up to 14 days without a connection. Where an entitlement is missing, the app refuses the step instead of quietly allowing it.
Updates are manual and verified
There is no update server and no silent update: you install a new version yourself, whenever you want. The Mac app for the relaunch is signed with an Apple Developer ID and notarised by Apple; we publish no download before that.
Your data
What we hold about you at all
Only what you enter
If you sign up for the relaunch notification, we hold your email address and the time of your consent. If you order from the relaunch on, your Undernap account stores your email, workspace, members, plan, licence and device names — never your projects, prompts, files or AI provider credentials. More in the privacy notice.
Double opt-in
The address only counts after the confirmation link is clicked. Without that click, nothing happens.
Deletable any time
The unsubscribe link is in every email. Unsubscribing removes your entry — no question asked, no waiting period.
Never shared for advertising
Your address is not sold, rented or used for third-party advertising.
Found something?
If you suspect a vulnerability in this website or in Undernap, write to us directly. We reply, confirm receipt, and say what we are doing.