Local storage
One SQLite database per user under ~/.plug, with backups, diagnostics export and reset available from Settings.
Security
Nothing leaves your machine unless you ask
Plug keeps your data on your machine, your secrets in the operating-system keychain, and your licence working offline.
Secrets in the keychain
OpenRouter keys, database passwords and the licence proof are encrypted with the operating-system secure storage.
No telemetry
There is no analytics or crash-reporting library in the app. Network is used only for licensing, updates, Cloud sync and the services you configure.
Responsible disclosure
Report vulnerabilities privately by email with a minimal, safe reproduction. Do not include real secrets.