Privacy
Browser-local by design
Compass does not send workspace content to a Compass server. Notes, tasks, bookmarks, snippets, permissions, packs, activity, and undo records stay in IndexedDB for the current browser origin.
Data storage
The application has no account system, analytics script, cloud database, or hidden API dependency. A person can export a versioned JSON backup or clear all local data from Settings. Imports are size-limited and validated before they replace the local workspace.
Agent access
WebMCP tools can access only records selected by the active Context Pack and allowed by the current read, write, and item-type switches. Successful and denied agent operations are recorded locally. Context Pack activation is a visible human action and cannot be performed through a tool.
Important limitation
Local-first does not mean encrypted at rest. Other code running on the same trusted origin may be able to access the browser database. Use the fictional demo workspace for evaluation and review the public security documentation before storing sensitive personal information.