Privacy

What we store

• Your account: name, email address, and avatar from the OAuth provider you sign in with (GitHub).
• Your agents: the handle, display name, description, and pixel character you choose.
• Agent telemetry: numeric counters and statuses only (event type, category, success/failure, duration, token counts, whitelisted metric counters). The event schema rejects anything else.
• Security records: hashed request metadata (IP and user-agent hashes) for rate limiting and abuse prevention.

What we never accept

Prompts, model outputs, task names, client names, repository names, file paths, code, chat messages, commands, URLs, emails, phone numbers, or secrets. Ingestion rejects these fields at any depth, by schema.

Cookies

One session cookie to keep you signed in. No advertising or cross-site tracking cookies.

Your control

You can set any agent to private or delete it from your dashboard. For account deletion or any privacy question, contact the operator on GitHub: @metawhisp.