01Your files
Your work stays on your computer.
Recto is local first: we do not store your designs on our servers. A project is a folder you choose on your computer. Its pages, styles, pictures and Recto's own notes, in the project's .recto folder, stay in that folder. Open, copy, commit or delete them with any other tool.
Recto's settings and your saved design systems live in its own folder on your computer. Nothing in either place is sent to us.
02Usage numbers
A few anonymous numbers, on until you switch them off.
The Recto you download sends a small set of usage numbers to an address of ours, so we can tell how many people use it and which parts earn their place. Every field is a number, a date, a version or a word from a fixed list. That covers:
- that Recto ran for the first time, and which days it was used;
- minutes of use and of agent work in each area: Design, Motion, 3D and Slides;
- which agents you started, named from a fixed list such as Claude Code, Codex and Cursor;
- which features you used, once per sitting, and four first steps: opening a project, making a page, starting an agent and exporting;
- Recto's version, your operating system and its chip type;
- while a Recto window is in front and you are using your computer, a short signal every five minutes, so we can count people using it right now.
Recto never sends files, folder paths, project or page names, what you type in a brief, or your agents' output.
Each install has a random ID that is not tied to your name or email. Our relay drops your IP address, keeps only the country, and passes the numbers on to PostHog, the analytics service we use.
To switch it off, open Settings → Privacy and turn off Send anonymous usage numbers. Show what is sent, beside it, lists exactly what would go. Turning it off deletes the install ID and anything waiting to be sent. Recto also sends nothing while DO_NOT_TRACK=1 is set on your computer.
03Updates
One quiet check for new versions.
Recto asks one address of ours whether a newer version exists, downloads it in the background and installs it when you quit. It never restarts on its own. The check carries no install ID, and switching off usage numbers does not change it.
04Messages you send
Only what you write, when you press Send.
Help → Report an Issue, Request a Feature and Contact Support reach us only when you press Send. A message holds what you wrote, the email you give us for a reply, up to three pictures you attach, and one line naming Recto's version, your system and the part of the app you were in. It never carries the install ID.
Because you chose to send it, a message goes whether or not usage numbers are on. Pictures are kept for 90 days, then deleted.
05Fonts, imports, browsing
When Recto reaches the web for you.
- Fonts. Recto refreshes its Google Fonts list once per launch and fetches a font when you add one. The font is then saved in your project, so your pages need nothing online. Google sees these as ordinary requests from your computer.
- Imports. When you import a page from a URL or base a design system on a website, Recto loads that site the way a browser would.
- The built-in browser visits only the sites you or your agent open, on a private session kept apart from your other browsers. Sign-ins you import from Chrome, Edge or Firefox are copied into that session on your computer and never sent to us.
- Paste from Figma. Pictures in a Figma paste need a personal access token you provide. It is sent only to Figma, to fetch those pictures.
06Agents
Your agents talk to their own providers.
Recto starts the coding agents already installed on your computer, such as Claude Code, Codex or Cursor. An agent reads and writes your project files and talks to its own provider, under that provider's terms. Recto does not send your work to them and does not receive what they send.
The connection Recto offers agents listens only on your computer, and it refuses requests from web pages.
07Your choices
Yours to change, ours to keep current.
- Switch usage numbers off at any time in Settings → Privacy.
- Delete a project by deleting its folder. Delete Recto's own folder to remove its settings and saved design systems.
- Usage numbers carry no name or email, so we cannot look them up by person. To ask about a message you sent, or anything on this page, use Help → Contact Support.
When what Recto sends changes, this page changes with it, and the date at the top moves.