This website.
This is a static product website hosted on GitHub Pages. It does not scan your computer, read its processes, or obtain live resource measurements. Application screenshots contain example data; the diagrams are explanatory illustrations.
The site does not include analytics trackers, advertising scripts, account sign-in or forms. Fonts and media are served with the site. GitHub Pages still receives the normal network information needed to serve requests; see GitHub’s privacy statement.
Your color-theme and animation preferences are stored in your browser’s local storage, using rustwtm-theme and rustwtm-motion. They stay in that browser and are not sent to an application backend. You can clear them through your browser’s site-data settings.
The desktop application.
RustWTM records long-term per-app usage in a local SQLite database. Configuration and usage history live in %ProgramData%\RustWTM, in a directory writable only by SYSTEM and Administrators. The MSI uninstaller retains that data.
Its service runs as LocalSystem. Read-only named-pipe requests are available to interactive users; control requests require an elevated administrator. The pipe rejects remote clients. The security policy describes the checks and protected processes.
Automatic enforcement starts in dry-run. Manual commands still execute. Protected Windows processes and RustWTM itself cannot be throttled, suspended or terminated by the governor’s controls.
Connections you choose.
- Installer downloads and update functionality contact GitHub to obtain releases and published checksums.
- The optional Telegram bot communicates through Telegram when configured. Only configured allowed chat IDs can use it. Review your settings before enabling it.
- Docker monitoring reads a supported local Engine named pipe. All Engine operations are read-only GET requests. Container statistics and logs are kept in bounded window memory, rather than saved in the history database.
- The MCP server uses standard input/output. It does not open a network listener. Read-only is the default; control tools require
--allow-control.
These are documented behaviors, not a claim that every future version has been independently audited. Consult the current README, Docker guide and security policy for details.
Report security issues privately.
Follow SECURITY.md for private reporting. Avoid posting vulnerability details in a public issue. For ordinary bugs and feature requests, use GitHub Issues.