Zero-Trust Local Execution

Udeler Reborn operates strictly on a local-first, zero-trust paradigm. We do not run any centralized telemetry servers, analytics collectors, tracking pixels, or intermediate proxy servers. All course metadata, indices, transcripts, and video files remain entirely on your local file system.

Udemy Credentials & Vault Protection

When you authenticate (via standard browser login, Udemy Business SSO, or manual token), the authentication token is stored only on your device. When Vault Mode is active, both the token and downloaded lectures are encrypted at rest with AES-256-GCM using keys unlocked through your OS-native credential keychain (Windows Credential Manager, macOS Keychain, or Linux Secret Service).

Outbound Network Connections

The desktop client establishes direct HTTPS connections only with the following verified endpoints:

• Udemy Official API: To load subscribed courses, parse curriculum structures, and stream video content.
• GitHub Releases API: To check for official app updates and fetch release changelogs.

Open Source Verification

Udeler Reborn is licensed under MIT and fully open-source. Every file access, IPC bridge channel, and encryption routine is open for audit on our public repository.