'Privacy-first' gets thrown around a lot. Here's what it actually means at Little Bear Apps:
Most tools are fully local — nothing phones home, nothing gets tracked, nothing gets stored on my end. Your data stays on your machine.
When a tool does collect data — for crash reports, analytics, or account features — I'll tell you exactly what, why, and where. No surprises, no buried disclosures.
Every public repo has automated CI, security scanning, and dependency auditing. Production deploys require manual confirmation. I report vulnerabilities responsibly via security@littlebearapps.com and encourage others to do the same.
I also acknowledge what I can't control. If you download from PyPI or npm, those registries see stats. If you open a GitHub issue, GitHub has that data. This website uses Google Analytics if you accept cookies; the privacy page has the details. I can't change how those services work, but I can be upfront about it.
Every tool page has transparency indicators so you always know where you stand. For the full picture, see Behind the Scenes.