Privacy / verification
What is in a diagnostic report, what is not, and how we prove it
“No telemetry” is easy to say. A support report you choose to send is the one time data leaves your machine — so it is the place where the claim has to be checkable rather than trusted.
It quotes a frozen snapshot
The report is assembled from one snapshot taken at the moment you press the button. It deliberately never reaches back into live state, because live state may have changed between the moment you saw the problem and the moment you reported it. Everything in the report is a plain value, and the whole builder is a pure function.
What it contains
- Display model, connection type and resolution. Never a serial — the same fields the panel header already shows you.
- One human sentence for the DDC state, in the same wording the interface uses.
- How many DDC control endpoints macOS exposed, and the labels of the VCP features the panel answered.
- Scroll-engine state as ready-made label/value rows.
- A short newest-first timeline — only the first few entries are kept.
What is removed on the way out
- Display serials and EDID string serials. They identify a physical unit and they must not survive into a file you might paste into a public issue.
- Any credential — in practice, the licence key.
- Your home directory path, which otherwise leaks your account name in every path it touches.
Why a pure function matters
Because the redaction becomes provable. The report builder takes plain values and returns text; it needs no display, no window and no network. That is what lets a self-test assert the redaction contract on a machine with no monitor attached — otherwise the only way to test it would be to have the very hardware whose serial you are trying not to leak.
Honest limits
- A redacted report can still contain something identifying that we did not think of. If you spot one, that is a bug worth reporting.
- “No telemetry” describes the app, not your use of third-party services. If you paste a report into a forum, that forum sees it.
- Redaction covers the fields the builder knows about. It is a contract about known fields, not a guarantee about every possible string.