Outbound connections made by the desktop app, version 1.2.22. Compiled from the source code.
No analytics, telemetry or crash reporting.
The control panel is served from 127.0.0.1 and loads no fonts, scripts or images from the internet. Nothing listens on a public port: published sites reach your computer through an outbound cloudflared tunnel.
Terms used below. Address service: our Cloudflare Worker at baumeister-subdomain.ccjackb22.workers.dev, which assigns *.baumeister.host names and routes them. Install id: a random id generated at install; it identifies the copy of the app, not a person. Computer name: the OS hostname, used to label computers in an account.
| Host | When | Payload |
|---|---|---|
github.com, api.github.com | At launch, then every 6 h | Update check: GET of the release feed (latest.yml) in Baumeister-app/baumeister-releases. No request body. Installers download only when you click Install, and are rejected unless the code signature matches. |
baumeisterprivateserver.com | At launch | GET /api/model-config.json, the model list for the assistant's menu. No request body. |
| Address service | First launch, once | Install id. Returns a per-install secret sent with later requests, so another machine can't take over your addresses. |
| Address service | Setup, once | Recovery email, install id, computer name. Used only to send password reset codes. |
| Address service | At launch, and when the dashboard or a project page opens | Only with published addresses or a linked account. Install id, account email (if any), the hostnames this computer serves, computer name. Confirms each hostname still routes here and repairs the route if not. |
Cloudflare edge (cloudflared) | Continuous, while anything is published | The tunnel (cloudflared tunnel --no-autoupdate run). TLS terminates at Cloudflare; requests are forwarded to 127.0.0.1. See How it works. |
| Your own domain | When a request arrives at the site's .baumeister.host address. Result cached 10 min, or 2 min after a failure. | Only for a site with a custom domain. GET https://<your-domain>/__bm/ping, user agent Baumeister-domain-check, no body. The app answers that path itself with a random per-run token, so a match proves the domain reaches this site. Only then does the .baumeister.host address return a 301 to the domain. No match, no redirect. |
| Feature | Host | Payload |
|---|---|---|
| Publish an address | Address service | Chosen name, install id, account email (if any), computer name. Contact email only if "Let Baumeister contact me" is ticked. |
| Connect your own domain | Address service, cloudflare-dns.com/dns-query (DNS over HTTPS), your domain | The domain name. While the Domains page is open: DNS lookups for the domain, and a GET of its front page to show whether it resolves to this site. |
| Connect with Cloudflare | dash.cloudflare.com (OAuth), api.cloudflare.com/client/v4 | OAuth sign-in to your own Cloudflare account, then the DNS records for your domain, written to your zone. |
| Safety Net (opt-in) | Address service, stored in Cloudflare R2 | The project's public files, so the site stays up while the computer is off. Excluded: dotfiles, keys, databases, backups, app source, anything matching a secret pattern. Sites with a visitor password are never uploaded. |
| AI assistant (your key) | api.anthropic.com, api.openai.com, generativelanguage.googleapis.com, api.x.ai, or the base URL you set | Your instruction plus up to ~120 KB of the project's text files, sent straight from your computer with your key. .env and key files are listed by name only, never their contents. |
| Claude Agent (your Anthropic key) | api.anthropic.com | Same as the assistant. Claude Code's own usage statistics and error reporting are disabled. |
| Form email alerts (on once your email is verified; per project: off or short) | Address service, then Resend | On each form submission: install id, project name, form name. Full alerts (the default) also include up to 40 fields and the sender's email, for replying. Sent to your verified email. Not stored by us; Resend keeps a copy of sent mail. |
| Free AI updates (the change box, with no API key) | Address service, then api.anthropic.com (claude-haiku-4-5) | Only after you turn them on: your request, that website’s text files and your email and install id. Never hidden files, files that look like keys or passwords, or what visitors sent you. Counts are kept for the monthly limit; requests and files are not stored. |
| Help chat (the ? button) | Address service, then api.anthropic.com (claude-haiku-4-5) | The last 12 messages and your install id, answered on our key. Questions are counted per install for the monthly limit; the text is not stored. |
| Email sign-in | Address service | Email address, the emailed code, install id, computer name. |
| Link to a baumeister.host account | app.baumeister.host | Install id and computer name. |
| Phone status (opt-in) | app.baumeister.host, every 60 s | App version, computer name, OS, CPU, memory and disk use, uptime, and each app's name and running state. No files, paths or error text. |
| GitHub | github.com/login/device, api.github.com | Device-flow sign-in, then the pushes and imports you start. |
| Website backup | The site you enter | GET requests for that site's pages. |
If you see traffic that isn't listed here, email info@baumeisterprivateserver.com. Either the app or this page is wrong, and we'll fix whichever it is.