Privacy
Local-first by default. This page explains exactly what leaves your machine, what doesn't, and what to watch out for.
Ollama (local) — nothing leaves your machine
With the default provider, messages are sent only to the Ollama URL you
configure. The default URL is localhost, so data stays on your
machine. No account, no cloud, no telemetry.
Cloud providers — opt-in, and what's sent
If you switch to OpenAI, Anthropic, OpenRouter, Groq, Gemini, or a custom URL, the following are sent to that provider's servers:
- Your messages
- The built-in study-assistant identity prompt
- Your selected skill and custom instructions
- Active-file context, when Use Active File as Context is on
Ollama is the default precisely so nothing leaves your machine unless you choose otherwise. Per-provider details: AI providers guide — privacy.
API keys are stored in plain text
Keys are saved in the vault's plugin data.json.
Anyone with access to that file can read them — Obsidian has no secure key
store. Don't sync an unencrypted vault containing cloud keys to shared
devices or public services, and rotate keys if you think a vault copy leaked.
What is never collected
- No telemetry or analytics.
- No vault contents beyond what you explicitly send.
- Chat history is not written to disk — it lives in memory and is cleared when the view reopens.
Practical advice
- Keep Use Active File as Context off for notes with sensitive content when using cloud providers.
- Prefer fully local setups (Ollama, LM Studio) for private or exam material.
- Review custom instructions — they're sent with every request.