What this server stores
Nothing about you or your documents. The server only hands out the static program files; it has no database, no upload and no account. The only request a page makes besides loading its own files is /version.json (the build number shown in the footer). The server's web log records ordinary requests (time, address, page) like any web server; documents are never part of them. The website contacts no other host: besides its own files and /version.json, the only request is to our own /api/report endpoint, and only when you submit a report (? › Report a problem…, see below).
What your browser stores
Calc, Write and Show keep autosave copies of unsaved changes and a list of recently used files (with a copy of each document) in this browser's own storage (IndexedDB), plus your language and settings (localStorage). This data is private to this browser profile on this device; it is not synced to other browsers or devices. In every app, File › Home › Privacy lets you remove these local copies, or stop keeping autosave copies. Clearing the site data in your browser settings removes everything as well.
Desktop apps
The desktop builds keep the same data in the app's data folder of your user account and make no network connections of their own.
Connections to your own cloud (desktop apps only)
Connections to your own cloud and the AI assistant are desktop apps only. The website never contacts another host: its security policy allows requests to this site only, and Calc, Write and Show on the web show no connections and no AI assistant. In the desktop apps you can open and save files on a WebDAV server you use – Nextcloud, ownCloud, a NAS or a hosted drive – under File › Open › Add a connection…. Nothing happens until you do: Rusuite offers no cloud of its own, registers no provider apps and no Rusuite server is involved. The only host contacted is the server you configured, directly from the app, and only when you browse, open or save there. The connection and – only if you tick “Remember password on this device” – its password stay on this device (the app's data folder and the system keyring). File › Home › Privacy › Forget all connections removes them.
AI assistant (desktop apps only, your own account)
The AI assistant is available in the desktop apps only; the website never contacts another host. In Calc, Write and Show on the desktop it is off until you turn it on under File › Options… › AI and enter an API key of your own account with a provider (Anthropic's Claude, or an OpenAI-compatible service including local servers such as Ollama). Rusuite runs no AI service and no server in between. The text you select – plus a one-line description of the document (title and counts), and the whole document only if you tick “Include whole document” – is sent directly from the app to the provider you chose, and only when you use an AI action or press Test; the provider's terms apply to that data. The key stays in the system keyring; “Forget key” removes it. Conversations are not stored.
Reporting a problem (optional, public)
The ? Help menu at the top right › Report a problem… (also under File) lets you report a bug, suggest a feature or ask a question. Nothing is sent until you submit the dialog. Then exactly what the dialog shows goes to this site's report service (/api/report; the desktop apps use the same address): your title and text, the screenshots you added (a capture of the window includes the visible document content) and – unless you untick it – the diagnostics shown in full in the dialog (browser, window size, document size as counts only, the last error message), the app and its version, the operating system, the language and a random installation number. Your document itself is never sent. The service posts the report publicly as an issue at github.com/refaustria/rusuite/issues (screenshots in that repository), where GitHub's terms apply; it keeps nothing itself except short-lived counters that allow one report per installation per hour, and its log records no report content. The installation number is made up randomly once and kept in this browser's storage (desktop: the app's data folder); the published report shows only a short fingerprint of it.
Tracking
None. No cookies, no analytics, no advertising, no fonts or scripts from other sites. A Content Security Policy makes your browser refuse connections to any other host.