From 817dd806d6e0f1d2ac80b7c8f6cda24ae4647fd0 Mon Sep 17 00:00:00 2001
From: "fctl-sh[bot]" <343971779+fctl-sh[bot]@users.noreply.github.com>
Date: Sun, 18 Oct 2026 17:42:45 +0000
Subject: [PATCH] docs(legal): say what hosts download for projects' images

Hosts now pull the images projects choose from their registries, and
download a project's repository from GitHub to build the image it builds
from it, when their owners allow builds (hyperstructure/fctl#16). They
also report the images and repositories they allow.
---
 legal/privacy.md | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/legal/privacy.md b/legal/privacy.md
index 63dff5b..c17364f 100644
--- a/legal/privacy.md
+++ b/legal/privacy.md
@@ -55,9 +55,11 @@ from other websites.
 The install script and `fctl host` download releases from fctl.sh, and
 `fctl host` pulls the default sandbox image from GitHub's container
 registry, ghcr.io (`fctl host image build` downloads the image's sources
-from GitHub instead). Beyond that, the `fctl` command talks only to the
-fctl instance you sign in to, and the agents on your hosts to Anthropic and
-GitHub.
+from GitHub instead). It also pulls the images projects choose, from their
+registries, and downloads a project's repository from GitHub to build the
+image the project builds from it, when you allow that. Beyond that, the
+`fctl` command talks only to the fctl instance you sign in to, and the
+agents on your hosts to Anthropic and GitHub.
 
 ### When you use app.fctl.sh
 
@@ -107,7 +109,8 @@ organization's email domain, to its allowlist.
   the session they come from and when they expire. They show whatever the
   agent captured, which can be your app, your code or your data.
 - **Hosts**: for each machine you register, its name and hostname, its
-  operating system, architecture, processors and memory, its fctl version, a
+  operating system, architecture, processors and memory, its fctl version,
+  the sandbox image it uses and the images and repositories it allows, a
   hash of its token, and when it was last online.
 - **Audit log**: security-relevant actions, such as sign-ins, invitations,
   access changes and deletions, with who did them, when, and from which IP