Pilot status: source complete and CI-tested · no hosted instance running · telemetry stays local-only unless you self-host

Telemetry that earns trust.

Opt-in, allowlist-only by construction, deletable on request — and off until you say otherwise.

Start here

Which one are you?

This repository is the server half of a two-sided system: the vouchfx engine collects the events, this service ingests and eventually forgets them.

Should I opt in?

You run vouchfx and want to know exactly what vouchfx telemetry enable would send, what it never sends, and how to check for yourself before you decide.

Read why telemetry, and how to opt in →

The guarantees

Five structural promises, not five policy promises.

Each of these is enforced by what the code physically does — an allowlisted C# record, a partition-drop job, a fail-silent transport — not only by a paragraph in a policy document. Follow each link to the page that owns it.

Trust, verified

Don't take our word for it — read the outbox.

Every event the engine would send is written first to a local NDJSON file on your own machine, before any endpoint is configured. Nothing is transmitted until you set VOUCHFX_TELEMETRY_ENDPOINT — until then, the outbox is the whole story.

See for yourself: the local outbox

Inspect %APPDATA%\vouchfx\telemetry-outbox.jsonl (Windows) or ~/.config/vouchfx/telemetry-outbox.jsonl (macOS/Linux) line by line — each line is exactly what would be POSTed if a backend were configured.

Read the local-outbox walkthrough →

Documentation

Six pages, rendered from markdown on every push.

The pages below are generated from this repository's own source of truth, so they never drift from the service they describe.

Browse the full documentation index →