Does Dotvault track my usage?

Only if you explicitly opt in. On first launch you’ll see a prompt asking whether you’re happy to share anonymous usage data via Aptabase — a privacy-friendly analytics service. If you say yes, I collect things like which features you open and the names of frameworks detected in your projects (from a fixed public list). I never send environment variable names, values, file names, project names, or paths. Ever.

Dismissing that prompt is not consent. Telemetry is off before it appears, and closing it, pressing Escape or ignoring it entirely all leave it off — the only thing that turns it on is choosing to. You can change your mind either way in Settings at any time, and switching it off takes effect immediately rather than at the next restart.

The one request Dotvault makes whether or not you opt in is the update check, which asks my release server whether there is a newer version. It carries no identifier and nothing about your projects. The security page lists it alongside every other request the app makes.