This site sets no cookies.
And loads nothing from third parties. Here is everything getbrut.app does with data, written to be read in five minutes, followed by the short version of what the app itself sends: almost nothing.
The website
getbrut.app is a set of static files. There are no cookies, no analytics, no trackers and no third-party scripts. The fonts are self-hosted; the demo video is served from here. Nothing on these pages reports your visit to anyone.
The files are served by GitHub Pages. Like any web host, its servers receive the standard connection data of a request (your IP address, the page asked for, your browser's user-agent string). We add nothing on top of that and we keep no logs of our own.
The beta form
The one place this site can learn anything about you is the beta application, and only when you press Apply. The form asks for an email address, an optional studio or artist name, a seat count, and what you would run through Brut first. There is also a checkbox to receive release announcements. A hidden decoy field catches bots; a human never sees it.
On Apply, your entries are delivered to our inbox through a form-relay service (FormSubmit). That is the only moment this site contacts a third party on your behalf, and it happens because you chose to send. We keep the list of applicants and approved seats in a database we operate (Supabase) so that seats can be approved and installers served. Nothing from the form is sold, shared, or used for anything but running the beta.
Signing in and downloading
The download page asks you to sign in with the email your seat was approved on: a magic link, or Google, or GitHub, through Supabase, the identity service the app itself uses. The page keeps your session in your browser's local storage (not a cookie) until you sign out. The sign-in is checked against the approved list to hand you a short-lived link to the installer. Nothing else is recorded.
Emails
We send two kinds. One approval email when your seat opens, and release announcements to approved seats when a new build is out (the same content as the changelog). Both come from noreply@getbrut.app through a transactional email service (Resend), and replies land with us. To stop receiving announcements, reply to any of them and say so; a person removes you.
The app, in short
Brut is built local-first, and privacy is the architecture rather than a policy. The full page is in the docs: what stays on your machine and what (very little) leaves it. The summary:
- Your prompts, images, renders, video, graphs and projects are written to your disk or your NAS. Brut has no server in the generation path and cannot see your work.
- Your API keys live in your operating system's keychain. Never logged, never sent to us, never written into a graph or a
.brutpack. - Generation calls go from your machine straight to the provider you picked, on your key, under that provider's terms. If you choose to route a model through an aggregator you subscribe to, the same holds for that service, and the node, the confirm dialog and the ledger say so.
- Marcel, the companion, talks to the text-model provider you chose, on your key. Every call is written to your local spend ledger. His memory of your taste is a plain-text file on your disk that is never synced.
- The only thing Brut ever sends us is a heartbeat while you are signed in, at startup and once a day, so we can count active seats during the beta. Seven fields, no content:
{
"install_id": "a uuid minted once on this machine",
"app_version": "…",
"engine_version": "…",
"os": "Windows",
"os_version": "…",
"arch": "…",
"ts": "…"
}
You can see this exact JSON any time in the app, under Settings → Account. The Send feedback button is the one other thing that can send data, and only when you press Send: your message, your account email so we can reply, and, only if you leave the checkbox on, the same seven fields plus the last few error messages. The dialog shows that block byte for byte before it goes.
Your data, your call
Write to contact@getbrut.app to see or delete anything we hold about you: a beta application, an approved seat, an account. We answer as people, not as a form, and deletion is complete because there is so little to delete.
Who
Brut is made by ZUH Visuals, an architectural visualization studio, and Hugues Rebay is the person responsible for this site and its data. Questions about any of the above: the same address.