← Back to Dino

Transparency

CLI Telemetry

Last updated: August 15, 2026

Dino’s command-line tool collects completely anonymous usage data to help us decide what to build, fix, and support. It is aggregate-only, is never traceable to you, and you can turn it off with a single command. This page explains what is and isn’t collected — and we keep it accurate as the CLI changes.

The short version

  • Everything collected is anonymous and only meaningful in aggregate.
  • We never collect your API keys, the endpoints you test, your requests and responses, or your scan results.
  • Off with one command: dino telemetry disable (or DO_NOT_TRACK=1).
  • Analytics on this website is separate, and only runs after you accept analytics cookies.

What we collect

Anonymous, aggregate signals about how the CLI itself is used:

  • Which command you ran, and whether it succeeded.
  • The Dino CLI version.
  • General machine information — operating system, CPU count, and whether it ran in CI.
  • How long commands take.
  • For a scan, which built-in checks ran and aggregate pass/fail counts — never the findings or the API itself.

What we never collect

Nothing that could identify you or reveal what you test:

  • API keys, tokens, or credentials.
  • The endpoints or URLs you point Dino at.
  • Request or response data, scan results, or findings.
  • File contents, file paths, or environment variables.
  • Anything personally identifiable.

How to turn it off

Telemetry is on by default. To opt out, run dino telemetry disable, or set DINO_TELEMETRY_DISABLED=1 (or the standard DO_NOT_TRACK=1) in your environment — honored everywhere, including CI.

To check the current setting, run dino telemetry status. To see exactly what would be sent without sending anything, set DINO_TELEMETRY_DEBUG=1 — Dino prints each event to your terminal instead of transmitting it.

Why we collect it

Knowing which commands run, on which platforms, and where they fail tells us what to support and improve. That is the whole purpose: it is never sold or shared, and it never trains a model. For how the rest of Dino handles data, see our Privacy Policy.