Code signing policy

The Windows releases are going to be signed through the SignPath Foundation's free code signing for open source projects (being set up; until then they are unsigned, see the first start).

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

• What gets signed: the Windows installer and reframe.exe in the portable ZIP, built by the release workflow on GitHub Actions from the repository's tagged source. Each release is signed only after an approver has approved it.
• Committers and reviewers: TheyCallMeJuzou. Changes from anyone else come as pull requests and are merged only after a review.
• Approvers: TheyCallMeJuzou

Privacy policy

reframe collects nothing about you and sends nothing about you or your sessions anywhere. Its own use of the network:

• Updates: half a minute after starting and then every six hours, reframe asks the repository's releases on GitHub whether there is a newer version. That is a plain web request, as when you open the page in a browser (GitHub sees your IP address, see GitHub's privacy statement). The installed Windows app and the AppImage then download the new version from there. You can turn this off in Settings (Check for updates, from version 0.6.0 on).
• Links you click (for example in About) open in your browser.

Claude Code, which reframe starts for you, talks to Anthropic the way you have set it up; for that, Anthropic's privacy policy applies.

This website is a set of plain pages on GitHub Pages: no cookies, no tracking, nothing loaded from other sites. GitHub, which serves it, sees your IP address (see GitHub's privacy statement).