Privacy model

Agentic Chat sends vault content only to services you configure. Chat requests go to your model provider, and opt-in features such as embeddings, web, MCP, and observability add their own egress paths. The plugin renders every tool call inline.

Defaults

• No telemetry is sent by default.
• Web access is off by default.
• MCP is off by default.
• Observability export is off by default.
• Provider API keys, MCP secrets, web-search keys, and OAuth tokens use Obsidian secret storage.
• The vault data.json stores secret ids and non-secret settings, not secret values.

OpenRouter routing

OpenRouter requests use privacy routing options by default:

Setting	Effect	Default
Require zero data retention	zdr: true, only endpoints that retain nothing	on
Deny prompt logging and training	data_collection: "deny"	on
Allow provider fallbacks	Fallbacks are allowed only if they obey the same privacy rules	on

Strict routing can mean a model has no compliant endpoint. In that case, choose another model, relax the routing settings deliberately, or use Ollama.

Local mode

Ollama keeps prompts, note content, and tool results on your device, assuming your Ollama server itself is local.

Tool visibility

The conversation shows every read, search, write, edit, rename, delete, frontmatter change, web request, and MCP call as a step.

Mutating vault tools are approval-gated, and deletes go to trash.

Opt-in egress

Web access sends search queries to the selected search backend and fetched URLs to the target sites.

MCP sends tool arguments to the MCP servers you configure. Servers outside the local machine must use HTTPS.

Observability sends trace data to the OTLP or Langfuse endpoint you configure. Metadata-only is the default payload mode.

Memory privacy

The plugin stores memories locally in memories.jsonl inside the plugin directory. It sends them to a provider only when the agent calls search_memory and the result is included in a prompt. You can clear all memories with /memory clear --confirm.

Semantic retrieval privacy

Embedding requests send note text to the configured provider. Use Ollama for fully local embeddings if you want note content to stay on your device. The local vector index lives inside the plugin directory.

Document import privacy

The import_pdf and import_document tools extract text from vault files into plugin-managed source artifacts. The plugin stores the extracted text locally in the artifact system and sends it to the model only when the agent reads the artifact.