fix(privacy): stop telemetry on consent revocation

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
Dennis V
2026-07-14 06:30:09 +00:00
parent 679475d0a4
commit f9b18a06f3
8 changed files with 114 additions and 46 deletions

View File

@@ -171,7 +171,7 @@ OpenCode Mobile does NOT collect any of the following:
- Browsing history, search history
- Sensitive info
- User content (code, prompts, AI responses are not sent to our servers)
- Identifiers (User ID, Device ID — Sentry uses an installation-scoped anonymous ID, see below)
- User ID (the app has no accounts or user identity)
### Data Linked to You: None
@@ -179,13 +179,14 @@ OpenCode Mobile does NOT collect any of the following:
| Data Type | Category | Purpose | Optional? |
|---|---|---|---|
| Crash Data | Diagnostics | App functionality | No — always on (see note) |
| Performance Data | Diagnostics | App functionality | No — always on (see note) |
| Other Diagnostic Data | Diagnostics | App functionality | No |
| Crash Data | Diagnostics | App functionality | Yes — explicit opt-in |
| Performance Data | Diagnostics | App functionality | Yes — explicit opt-in |
| Other Diagnostic Data | Diagnostics | App functionality | Yes — explicit opt-in |
| Device ID | Identifiers | App functionality | Yes — Sentry installation ID with explicit opt-in |
**Explanation**: Sentry crash reporting sends device model, OS version, app version, and stack traces. Sentry assigns an anonymous installation ID (not linked to any Apple ID or personal information). No user-generated content (code, prompts, responses) is ever sent.
**Sentry opt-in status**: As of v0.2.3, Sentry is **always on** when a DSN is configured. If you add a settings toggle for Sentry consent (planned), change Optional? to "Yes" and add a note that users who decline are in the "Data Not Collected" category. In App Store Connect, once opt-in is implemented, this section can be removed or marked optional.
**Sentry opt-in status**: Crash reporting is off by default. The first-launch consent prompt and Settings → Privacy toggle control it. Declining does not initialize Sentry; turning it off later closes the active SDK and stops new event capture.
**"Are you or your third-party partners using this data to track users?"**: No

View File

@@ -186,7 +186,7 @@
<ul>
<li>Open the app → <strong>Settings</strong> → <strong>Privacy</strong> →
<strong>Crash reporting</strong> toggle.</li>
<li>When the toggle is off, Sentry is never initialised and no data leaves your device.</li>
<li>If you decline, Sentry is never initialised. If you turn reporting off later, the active SDK is closed and no new events are captured.</li>
</ul>
<h2>5. Third-Party Services</h2>

View File

@@ -55,7 +55,7 @@ URL scrubbing: before any event is sent to Sentry, our code strips all server UR
Crash reporting is **opt-in and off by default**. On first launch you will see a consent prompt. You can change this at any time:
- Open the app → **Settings** → **Privacy** → **Crash reporting** toggle.
- When the toggle is off, Sentry is never initialised and no data leaves your device.
- If you decline, Sentry is never initialised. If you turn reporting off later, the active SDK is closed and no new events are captured.
---