Privacy

We collect almost nothing.

The app has no cloud and no telemetry, so your queries and your data never reach us. This page covers app update checks and the small amount the website collects.

Last updated 26 Sep 2026
Applies to App & website
Contact support@bufflehead.app

Questions about any of this? Write to us — a person reads it.

The app.

No app telemetry or analytics Bufflehead does not send usage analytics, crash reports, query text, schemas or file contents to a Bufflehead server. Data you make available to a connected AI tool is subject to that tool and its provider's data policy.
Direct connections to your data Local file queries run in DuckDB on your machine. When you connect to S3, Postgres or MySQL, the app talks to your configured infrastructure, directly or through your chosen tunnel. Those data connections do not pass through a Bufflehead cloud.
Update checks contact GitHub Starting with v0.30.0, the app requests public release metadata from GitHub on startup and when you choose Check for Updates. If you choose to download an update, it retrieves the release package from GitHub. These requests expose ordinary connection metadata, including your IP address, to GitHub, but do not include your queries, credentials or file contents. Launch with BUFFLEHEAD_NO_UPDATE_CHECK=1 to disable automatic startup checks.
What it writes to disk Query history, bookmarks and window layout are stored in your own user config directory so the app can reopen where you left off. Downloaded updates are staged in your user cache directory. These files stay on your computer and you can delete them at any time.
You can check this yourself The core is open source. Read the network code, or watch the app's traffic with any monitor you trust — the source is on GitHub.

This website.

The demo form If you request a demo we store exactly what you type: name, work email, company, team size and your message. We use it to reply to you and to schedule the demo — nothing else. We do not sell it, rent it, or pass it to advertisers.
Server logs Our web server keeps ordinary request logs — the page requested, the time, the responding status — which it needs to run and to spot abuse. They are not used to build a profile of you.
No cookies, no tracking pixels This site sets no cookies of its own and carries no analytics script, ad tag or tracking pixel. That is why there is no cookie banner.
Third parties this page loads Fonts come from Google Fonts and the stylesheet framework from the Tailwind CDN; downloads and source links go to GitHub. Loading those files reveals your IP address and browser to those providers, as any web request does. We send them nothing about you beyond that.

Your choices.

01 Ask us what we hold about you, and we will tell you.
02 Ask us to correct it or delete it, and we will — there is no dark pattern in the way.
03 Using the app alone requires no account and sends us nothing, so there is nothing to ask about.

Changes to this page.

If what we collect ever changes, this page changes with it and the date at the top moves. Material changes to how we handle demo-request details will be sent to the address you gave us.

Request a demo Or just download it — no form