Orbi is published by Rafly Lesmana, an individual developer (“we”). Contact: GitHub issues.
None. There is no telemetry, no crash reporting service, no advertising identifier and no analytics SDK.
| What | Where | Why |
|---|---|---|
| Preferences (sound, volume, screen, start with Windows, how the island rests) | %APPDATA%\Orbi on Windows; ~/.config/orbi on Linux | To remember your settings |
| What your AI agents show on the island: their name, the task you gave them, their status, their cards (progress, numbers, lists, summaries, links) and their questions | In memory while they run. Cards an agent marks as lasting are also kept in agents.json in %LOCALAPPDATA%\Orbi on Windows or ~/.local/share/orbi on Linux, until you dismiss them or they expire | To show them on the island, including after a restart |
| The agent requests you closed | The island’s own web storage, in %LOCALAPPDATA%\fr.louisraille.planetbar on Windows; ~/.local/share/fr.louisraille.planetbar on Linux | So they stay closed |
| Diagnostic log (agent names, session ids, events such as “question asked” or “session ended”, errors — no card content, questions or answers) | %LOCALAPPDATA%\Orbi\orbi.log on Windows; ~/.local/share/orbi/orbi.log on Linux. Capped at 1 MB. Never leaves your computer. | To help diagnose problems between your agents and Orbi |
You can delete all of this at any time. First remove Orbi from your agents with orbi-mcp uninstall all. On Windows: uninstall Orbi from Settings → Apps, then delete %APPDATA%\Orbi, %LOCALAPPDATA%\Orbi and %LOCALAPPDATA%\fr.louisraille.planetbar. On Linux: remove the package (sudo apt remove orbi or sudo dnf remove orbi) or delete the AppImage, then delete ~/.config/orbi, ~/.local/share/orbi, ~/.cache/orbi and ~/.local/share/fr.louisraille.planetbar.
The Windows uninstaller deletes the log but leaves the bridge copy and agents.json in %LOCALAPPDATA%\Orbi; delete that folder yourself if you want to remove them.
Orbi connects to no online service. Your agents (Claude Code, Codex, Gemini CLI or any other MCP client) reach it through a local connection on your computer. When you answer an agent’s question on the island, your answer goes back to that agent only. What the agent then does with it, including sending it to its AI provider, is covered by that agent’s own terms and privacy policy. A link in an agent’s card opens in your browser only when you click it.
We have no access to anything your agents send or receive.
When you run orbi-mcp install all, it registers the local bridge and guard hooks in your agents’ own configuration: ~/.claude.json and ~/.claude/settings.json for Claude Code, ~/.codex/config.toml and ~/.codex/hooks.json for Codex, ~/.gemini/settings.json for Gemini CLI, and ~/.gemini/config/mcp_config.json and ~/.gemini/config/hooks.json for agy. It shows a diff, asks for confirmation and takes a dated backup of each existing file before writing. It preserves unrelated entries and removes previous Planet Bar registrations and owned hooks. orbi-mcp uninstall all removes only Orbi’s registrations and owned legacy entries.
Orbi asks for no special permission. On Linux, installing the .deb or .rpm package needs administrator rights; the AppImage doesn't.
Orbi is a developer tool and is not directed at children.
Since we hold no personal data about you, there is nothing for us to access, correct or delete. For data your agents send to their AI provider, please contact that provider. If you live in the EU, you can also contact your data protection authority.
If this policy changes, the new version will be published on this page with a new date.