Veneer is built on a strict local-first guarantee: your notes, passwords, encryption keys, and AI cover generation stay on your device. We cannot read your data because we never receive it.
Veneer runs 100% locally inside Obsidian on your device. No analytics, no tracking pixels, no crash reporting, and no telemetry servers exist. The plugin never phones home, never logs your note titles or contents to any external service, and operates without user accounts or cloud dependencies.
Notes, titles, and absorbed images are encrypted locally using Web Crypto AES-256-GCM and Argon2id (hash-wasm) inside your own Markdown files (draft_cache).
While a protected note is unlocked, decrypted text, real titles, and embedded images (rendered via temporary blob: URLs) exist strictly in volatile RAM. When you switch tabs, lock your screen, or close Obsidian, active keys and buffers are zeroed out and only the cover note plus the encrypted draft_cache YAML frontmatter remain on disk.
If you opt in to downloading a local GGUF model in Settings, the model file is downloaded directly from Hugging Face (huggingface.co) to your local .obsidian/plugins/deocy/models/ folder.
After download, cover generation runs 100% offline with --offline enforced on the local runtime. The local language model only receives the short cover persona and everyday interest tags configured in Settings and never reads your vault notes.
veener.fariz.tech)
The static documentation website at veener.fariz.tech collects no personal data, sets no tracking cookies, and runs all interactive demos locally in your browser memory. Keystrokes entered into the interactive Obsidian simulator on the landing page never leave your browser tab.
For any privacy questions, contact Fariz Anjum at farizanjum@veener.fariz.tech.