Are my secrets sent to Aptabase or anywhere else?

No — and this one’s worth being blunt about. The Aptabase SDK only ever runs in the main process and never gets anywhere near your file contents. Every event is filtered through an allowlist before it goes out, and the only structured data we ever send is a fixed enum (things like blank or framework) or a list of framework names from our public registry. Your .env files and your snapshots never leave your machine.