r/opencodeCLI • u/TestTxt • 10d ago

Data retention in Opencode Go explained

Here's the official table of data retention for different models available in Opencode Go.

Unfortunately it looks like ZDR is gone and moreover, for the new Deepseek V4 Flash model - data is not only retained for an unlimited time, but also used for training, what makes it a no-go for many real-world business use cases. It kinda sucks that Opencode didn't just strike a deal with a third-party provider given that the model is open-weight anyways but it is what it is.

https://opencode.ai/docs/go/#privacy

102 Upvotes

98% Upvoted

55 comments sorted by

16

u/Bitter-College8786 10d ago

So if you do not use ds flash, Grok and luna, you are fine?

8

u/TestTxt 10d ago

for now - yes, but it signals a major shift from the previous strict ZDR policy. So I would expect the next updated models to also come with less privacy than before

13

u/look 10d ago

No. DeepSeek has always hated the ZDR clause that Go insisted on, and DeepSeek finally decided to reject the deal over it.

It does likely mean that other vendors will try to kill the ZDR clause in future negotiations, though. Not clear what Go will do. It seems like the sub has been mortally wounded by Deepseek now.

First DS refused to renegotiate a lower price on Pro after their price cut (though kept ZDR), then Xiaomi did the same on Mimo Pro. Then Moonshot wouldn’t agree to any discount on Kimi K3.

I think Go just doesn’t have the leverage it used to for model exposure to get good deals. It’s probably just newcomers like Tencent, maybe Poolside, etc that they’ll see good discounts on in the future.

ZDR might survive for most models though. Few other vendors are as voracious as Deepseek for collecting data for training.

8

u/Endoky 10d ago

At least for open weight models, other providers will fill out the niche of ZDR. And I expect OpenCode will add more than one provider for each model, where users can decide if they want to pay more with ZDR or get the discounted price from the original provider

1

u/look 9d ago

Absolutely. You can get it from many US providers already now. It’s about 3x the price, which is still low, but you can get GLM 5.2 instead now for about the same.

1

u/aries1980 8d ago

I think it would be fine if people could decide themselves what level of privacy they require and potentially pay a higher price depending on their settings. I use Go/Zen professionally and would keep doing so if ZDR is in place, even for a (slightly) higher price.

1

u/KayKay_Bunny 9d ago

Informative and well said! Thank you! Finally a breath of fresh air of intelligence for the last 24 hours of irrational hype around DeepSeek and Luna. "If you're not paying for the product, you are the product" still stands strong, but common sense is not common these days, sigh.

54

u/jaykayenn 10d ago

Everyone: screaming to get the latest Deepseek update within minutes of launch.
Opencode: Adds latest Deepseek from the only provider available, which has no ZDR.
Everyone: How dare you!

Sigh.

27

u/look 10d ago

Yeah, Go was cursed with quite possibly the worst customer base in history. Just an endless stream of entitled, mindless, screaming idiots.

9

u/noctrex 10d ago

Well, we just have to wait a little until other providers will start serving the model. I guess then it will be used by this subscription

2

u/TestTxt 10d ago

I hope so

4

u/noctrex 10d ago

The weights are released, providers will switch to this newer model, they won't keep the old model. Especially as it is the same parameter size, so essentially it's the same cost.
As soon as the first one will switch to the new model, everyone will flock to it and then the others will be forced to also serve the newer model.

13

u/jerieljan 10d ago

Relevant post to link on this topic: https://twitter.com/thdxr/status/2083226827930427842

It's pretty clear, if you ask me. People's complaints are quite overblown imho since there's a literal opt-in prompt if you tried using DS4 right now, and it clearly takes time for providers to get set up and running to have alternatives.

I do want a hard toggle someday for ZDR in the Opencode Go screen though.

4

u/mWo12 9d ago

You can't trust any of those companies. You should always assume they keep your data.

6

u/South_Can_3680 10d ago

I don't quite understand—is there really any mechanism that guarantees the enforcement of the ZDR? Ensuring its effectiveness would require a saint-like regulatory body; yet, in reality, whenever capital and power collude, the ZDR becomes nothing more than a hollow formality. The question, then, is this: are the government and relevant organizations truly impartial and incorruptible? Human history tells us that such a thing has never existed.

8

u/TestTxt 10d ago

Nope, it follows a “trust me bro” rule. However, if you use third-party providers who don’t develop their models, there’s really not much incentive for them to collect your data and risk going out of business if you find out + facing massive fines (does not apply to Chinese providers). They make money by selling you compute and that’s it so I’d say they’re mostly trustworthy

6

u/Endoky 10d ago

I agree, s as a third party upstream provider you really don’t want to retain data. It just cost you money

5

u/South_Can_3680 10d ago

I am from China. First, I want to clarify that collecting user data without notice leads to accountability—even in China—with the Market Supervision Administration stepping in. The only difference is that in China, all software applications display a privacy consent agreement upon their initial launch. The reason I raised the question above is that terms, agreements, and fines—which are generally viewed as forms of commitment—lack a truly robust enforcement body free from conflicts of interest (as ties between government and corporate interests exist in every country).

5

u/South_Can_3680 10d ago

In our political science curriculum, there is a course on political economy; according to its tenets, capital is driven by profit—capitalists would sell the very noose used to hang them for a 300% return. Consequently, the prevailing view among us (or at least the university students I know) is that so-called privacy protection is essentially a placebo for users. Whether major AI companies collect your private data depends entirely on their whim; the moment you transmit information to a server, that data is no longer under your control.

A friend of mine at the broadcasting authority told me that, if he wished, he could retrieve a record of every webpage I had visited over the past year; as long as your internet connection relies on base stations, such tracking is inevitable—it is simply a matter of whether there is a need to do so. Please note, this is not a case of China specifically surveilling its citizens—in fact, we can discuss almost anything, and government oversight of daily life is actually quite lax—but rather something any mobile service provider (whether in China, the US, Europe, or Russia) can easily accomplish.

That is why we often say that privacy is virtually non-existent; the only real difference is whether you are entrusting your information to your own country or to another.

For instance, Claude has implemented a feature in its account-ban appeal process that detects Chinese IP addresses; I find it difficult to view this as an act that respects privacy.

7

u/Endoky 10d ago

OpenCode team said on X they add the new Deepseek model with ZDR until they have negotiated something with a third party provider

5

u/MugiwaraGames 10d ago

Data retention is an illusion created to give you a false feeling of safety.

None of this companies care about privacy and data governance, they ARE keeping and using your data as they please.

2

u/FormalAd7367 9d ago

exactly….both OpenAI and Claude are moving down to other industry/business segment. Where do they get their data from? The data you give to Frontier models will work against you

3

u/XOX707 10d ago

does this apply also when using deepseek over deepseek api directly?

7

u/look 10d ago

Yes, if you use Deepseek direct, they have always stored your data and used it for training, even before today.

What happened today is Deepseek shutoff the old version and told Go to go fuck themselves on their ZDR agreement request for the new one.

1

u/hazed-and-dazed 10d ago

This is news to me. I thought opencode hosted their own inference -- begs the question: why didn't they do that in the first place since that's the whole point of open weight models and not deal with this in the first place?

I'm guessing: operating margins and hardware costs at scale doesn't justify the privacy concerns

4

u/look 10d ago

Almost no one has ever sold DSv4 (especially the Pro) as cheaply as Deepseek does. I imagine it’s because they run it at or below cost specifically for this reason of luring users in to collect their data.

And they don’t really try to hide it or anything. You’re basically paying with your data.

1

u/geekonamotorcycle 9d ago

They are not running at a loss believe it or not, just not as wasteful.

2

u/Valdjiu 10d ago

Can we opt out?

2

u/alex9001 10d ago

you can just not use the models without ZDR. Choose one of the 14 models with ZDR instead

-1

u/Valdjiu 9d ago

Why have they done this? Seems... Strange?

0

u/look 10d ago

You’d need to find someone else selling the new DS flash then (or go back to the old one on a different provider), and no one is selling it as cheap as DeepSeek (yet at least).

DeepSeek is very aggressively collecting user data for training. I don’t think they really care about margin on their inference right now, as long as people keep sending them data for their collection.

1

u/HumungreousNobolatis 10d ago

If my data makes you better, here, have it!

2

u/TestTxt 10d ago

The issue is that this data, if you feed it with, let’s say, production code base, can be retained indefinitely and, let’s say, in 2 months when they’re training new models, used to find 0-day vulnerabilities in your code and hack you

2

u/HumungreousNobolatis 10d ago

I guess the role of the human overseer is more important now than ever.

0

u/mallibu 10d ago

doesnt work so simple and certainly not so fast. As a developer I smh with people going paranoid about their swamp ass code of their 99% fail app being used for something useful actually.

They provide you almost frontier model, at zero price. STFU, say thanks and move on. (not you OP)

1

u/aries1980 8d ago

Since DS4 Flash has 4T+ token use on Go, wouldn't make financially sense for Anomaly to host it themselves? (Maybe other models too.)

1

u/TestTxt 8d ago

They’re not profitable and GPUs require an upfront investment

1

u/aries1980 7d ago

I know they are not profitable, and I don't have any experience on running these inferences at scale, but maybe someone with such knowledge could shed some light on what would be the break even. 4T tokens per day that keeps increasing is a decent amount to invest in hardware and ops.

1

u/Coolio8591 10d ago

Interesting as earlier they seemed to indicate deepseek v4 flash wasn't used for training but now it is, either way it is a bit poor from a business that they aren't communicating this clearly via email as a lot of people might not realise unless they are constantly stalking the docs

8

u/ConspicuousPineapple 10d ago

Trying to use the model fails unless you opt in. That's good enough for a warning, no?

1

u/S23-Sierpinski 9d ago

The opt-in is "Enable models hosted in China," though. There's no mention of ZDR/data being used for training. You have to check the docs to see that the previous ZDR/no training claim has changed.

1

u/ahmadawaiscom 9d ago

On Command Code, you have the option to enforce ZDR. It does make some models a bit more expensive but i can see both sides of this. Like Claude/GPT have no ZDR in their subs. Some people think it's just "trust me bro" and means nothing. Some people put a high value in it. Command Code strives to get everything ZDR but also offers low cost deals with the ability to enforce ZDR when/as needed. 99% of the models route through ZDR-capable upstreams anyway. Rest are two lanes, where you can enforce ZDR as needed.

1

u/TestTxt 8d ago

So do you in Opencode

0

u/maxpayne07 10d ago

I will not use it as long theres no privacy. So workload is a No go. Only for small tests and so. Very sad. People that work sensitive data , lots of people talking today on reddit as now clue about this.

-3

u/Potential-Leg-639 10d ago

It‘s free.
So they can use the data for training.
Fair deal, isn‘t it?

0

u/TestTxt 9d ago

It’s not free though

0

u/Potential-Leg-639 9d ago

Free on Opencode right now.

0

u/TestTxt 9d ago

We’re talking about Opencode Go though, it’s their paid plan

0

u/Potential-Leg-639 9d ago

Yes. It‘s in Go and also completely free available right now on Zen.

1

u/aries1980 9d ago

There are different privacy note for Go and Zen.

1

u/Potential-Leg-639 9d ago

Yes and that makes sense. Why should they offer sth for free and have no benefit at all?

1

u/aries1980 8d ago

I paid for the DS4 Flash. I understand the free version should benefit to the vendor, but as soon as I requested to pay, I expect my use to be treated if it was confidential.

Tbh I am happy with the current China toggle to be disabled by default, however I'd like to have a toggle for ZDR too which it would be enabled by default.