What is sent when you opt in
Events go to PostHog in its US cloud region. Each event carries a random install id (never an account, email or device name), the app version, the release channel, the operating system name and version, and the CPU architecture. PostHog is told not to build a person profile and not to look up your location, and the PostHog project is configured to discard the IP address of the request.
That list is the whole allowlist: an event that is not on it, or a property that is not listed, cannot be sent, and
provider is bounded to a short lowercase id. PostHog keeps events for one year on its free plan and seven years on paid plans.
What is never sent
File paths, repository, branch and worktree names, URLs, commit messages, prompts, agent output, terminal contents, error messages, host names, user names and IP addresses. There is no field for any of them.Turn it off
- Settings → Privacy and telemetry → Anonymous usage data: turn the switch off. Dure tries to send one final
telemetry_opted_outevent, deletes the install id, and stops. - Set
DO_NOT_TRACK=1orDURE_TELEMETRY_DISABLED=1in the environment Dure starts from. Either overrides the switch without changing it; the Settings page names which one is in effect. - Continuous-integration environments (
CI,GITHUB_ACTIONS,GITLAB_CI,CIRCLECI,TRAVIS,BUILDKITE,JENKINS_URL,TEAMCITY_VERSION) never send.