Skip to content

Privacy

The RustGIS desktop app and command line collect no analytics, telemetry or usage data. Local files and projects are processed on your device. Features that use remote services can send searches, coordinates, data or assistant context to those services, as described below.

Online services

  • Find Place and place search send your query to OpenStreetMap's Nominatim by default. Find Place and Geocode Addresses can also use Komoot's Photon or a server you specify; geocoding sends the address values you choose from your table or layer.
  • Directions sends the route's start, stops and destination to FOSSGIS's public Valhalla server by default. The Directions pane asks for consent before sending places and remembers that choice. The map.route command can also use a server you specify.
  • Web basemaps and tile layers request tiles for the area you view; vector styles can also request their tile sources and sprites. These requests reveal the requested map area to the servers even when your local layers are not uploaded.
  • Web data, remote rasters, cloud storage, database connections and online catalogs contact their configured servers. Searches may send keywords, coordinates, an area of interest, dates or filters; authenticated connections also send the credentials or tokens required by that service. See Web data.

Servers receive ordinary connection information, including your IP address and request headers. Their own privacy and retention policies apply. Working with local files does not itself upload their contents to RustGIS.

AI Assistant and connected agents

When you use the AI Assistant, requests go to the provider and endpoint you configure, which may be a local model server. They include your messages, conversation history, map context (including the map centre, layer names, counts and field names), tool results and any skills the assistant reads. Tools can read feature attributes and geometry, so those results can become part of the conversation sent to the provider.

Signing in with ChatGPT contacts OpenAI's authentication services and Responses API. Local agents you connect or let the assistant delegate to use their own model services and tools, under their own configuration and policies. Approval prompts for file, network and other restricted actions do not stop ordinary assistant context and tool results from being sent to the configured model.

Plugins and downloads

Browsing the Plugin Manager fetches a registry and its blocklist; installing or updating a plugin downloads its package. The default registry is plugins.rustgis.app. The web app also checks the registry's blocklist at startup and may download packages saved by URL in an earlier visit. Preparing a Python process plugin can download uv from PyPI, Python and the plugin's dependencies.

WebAssembly plugins need the network permission to make web requests through RustGIS. A plugin with that permission can send information it can read to addresses it chooses. Desktop process plugins are not sandboxed and can access files and the network as ordinary programs. Review the permissions and publisher before installing; see Plugins.

On the desktop, Help › Check for Updates contacts GitHub's latest-release API only when you ask. It does not upload your project. The web app checks its own site for service-worker updates when it loads and returns to view, and fetches app icons from assets.rustgis.app. It downloads language fonts from that asset server when needed. The web GeoLibre tools download their runner from jsDelivr when needed; the tool list is cached between visits.

Website analytics

The websites we host, the documentation at rustgis.app and the web app at web.rustgis.app, use Google Analytics 4 to count page visits and see which pages are used. Google receives your IP address, the page you are on, the referring page and general device and browser information, and sets its own cookies in your browser. It is governed by Google's privacy policy.

RustGIS does not send layer contents, files or projects to Google Analytics. The web app's page-view event reports its address trimmed to the site and path (https://web.rustgis.app/), without the query string or map hash; its referring address is trimmed the same way. The documentation reports the standard page address, which can include a query string, such as the words of a site search.

You can block analytics with a content blocker or your browser's tracking protection; the sites work normally without them. Analytics run only on the sites we host: the measurement ID is added when those sites are deployed, so the desktop app, the command line and any copy you build yourself never load them.