Privacy

Idiot Box privacy policy

Privacy Policy

Effective: October 8, 2026
App: Idiot Box by The Wonderland Studio

Idiot Box is a free, open-source desktop IDE. Your code, settings, projects, and chats stay on your machine. We do not run user accounts or servers that collect your data.

1. What stays on your device

Idiot Box stores its app data locally in your system's app-data folder, such as %AppData%/idiot-box on Windows.

This includes:

  • Settings: A local settings.json holds your theme, fonts, layout presets, terminal, git, canvas and cursor preferences, your GitHub username, and the telemetry toggle.
  • Projects: Recent and pinned project paths, open tabs, canvas drawings, and project-specific app state under projects/. Your actual project files are never moved or copied.
  • Install ID: A random 24-character id in install-id.json, used only for the anonymous stats described below. It never identifies you.
  • Sessions and extensions: Window/session restore, layout presets, recent-project lists, and any browser extensions you choose to install — all stored locally.
  • Chats: The Hub assistant chat is held in memory only while the app is open and disappears when you close it. OpenCode agent sessions are saved locally by the bundled OpenCode runtime in its own storage.
  • Voice input: Microphone audio is transcribed offline using your operating system's built-in speech recognition. The recording never leaves your device and the temporary audio file is deleted immediately afterwards.
  • Toolchains: If you run Android setup or need a runtime for the Run panel, the Android SDK, JDK and the mise binary are downloaded into the same app-data folder.

Idiot Box itself never asks for or stores AI API keys. Anything you hand to the OpenCode agent, including credentials, is handled by OpenCode's own configuration on your machine. You can delete all of this data by removing the app-data folder. Uninstalling Idiot Box does not delete your project files.

2. When Idiot Box connects to the internet

Idiot Box can work offline. Apart from the automatic update check below, internet access is only used by features you choose to use.

Depending on what you use, the app may connect to:

  • Anonymous usage stats (opt-out, on by default): one hit on a public install counter per install, then a heartbeat every 30 seconds while the app is open. The whole payload is your random install ID, the app version, and a timestamp — no file paths, no project names, no personal data. This powers the "total users" counter and the "online now" number on our download page. The relay is public by design, so anyone can see that a random ID is currently online; that is the trade-off for a counter we cannot tamper with. Turn it all off any time in Settings → General → Telemetry.
  • Update checks: roughly every six hours, and shortly after launch, the app asks GitHub Releases whether a new version exists. A download only starts after you approve it.
  • Built-in assistant: the project-setup chat and AI commit messages are sent to Pollinations (text.pollinations.ai) and, when that is unavailable, to OVHcloud AI Endpoints' anonymous tier. No API key is involved. Whatever you type there is covered by those providers' own privacy policies.
  • GitHub: release and update information from api.github.com. If you enter a GitHub username and enable the Hub heatmap, your contribution graph is loaded through a third-party public proxy (github-contributions-api.jogruber.de) and your repository list through api.github.com.
  • Icon CDNs: file and framework icons from raw.githubusercontent.com (vscode-icons), cdn.jsdelivr.net (devicons), cdn.simpleicons.org, and the Tailwind browser build used by the component preview.
  • Tool downloads: when you press Setup or Run, the app fetches an Eclipse Temurin JDK from Adoptium, Android command-line tools and system images from Google, and the mise binary from GitHub releases.
  • Embedded web panels: the Community panel loads wonder-no-server-chat.pages.dev and the OpenPencil panel loads app.openpencil.dev. Both are third-party sites with their own privacy policies. The OpenCode agent itself runs as a local server on 127.0.0.1.
  • Your own providers: anything you point the OpenCode agent at — including Ollama or other local servers — is contacted directly from your machine.

When using an AI provider, your prompts, attached files, and tool results may be sent to that provider. Each provider has its own privacy policy.

Idiot Box contains no analytics SDKs, no advertising code, and no crash reporting that uploads. Crash dumps are written to disk locally and never sent anywhere.

3. This website

The Idiot Box website is a static site hosted on GitHub Pages.

We do not use accounts or cookies, and we run no analytics of our own. The website may load fonts from Google Fonts, background videos from public CDNs, and release information from the public GitHub API.

The stats shown on the Chatlog and Download pages come from public sources: GitHub's release download counts, a public anonymous install counter, and a public message relay that only carries a random install ID, the app version and a heartbeat timestamp.

Download and source-code buttons simply take you to GitHub.

4. Browsing inside the app

The built-in Browser panel allows you to browse the web directly, and any Chrome extensions you install run inside it.

Websites you visit through it — and the extensions themselves — are responsible for their own privacy practices. Idiot Box does not proxy, record, or monitor your browser traffic.

5. Children

Idiot Box is a general-purpose developer tool and is not specifically designed for children under 13.

We do not knowingly collect personal information from anyone, including children.

6. Changes and contact

If this privacy policy changes, the updated version will be published here with a new effective date.

If you have any questions, open an issue on our GitHub repository:

github.com/TheWonderlandStudio/Idiot_Box

7. Your responsibility

Idiot Box is just a tool. What you do with it is entirely your own responsibility. That includes the code you write, the files you open, edit, delete or share, the projects you work on, and anything you send to AI providers.

The creators of Idiot Box and everyone else involved have no part in any of that. The app collects no personal data — only the anonymous, opt-out usage stats described above — so there is nothing on our side that can be misused, leaked or held against anyone.

The Wonderland Studio