Privacy Policy

Anatema is the data controller for the limited personal data described here. Contact: GitHub Issues.

• No cookies, no analytics, no advertising or tracking scripts.
• Our hosting provider automatically records standard server logs (IP address, browser user agent, requested URL, time). They are used only to deliver the site and protect it from abuse, and are deleted on the provider’s normal rotation schedule.
• Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f)).

We do not collect, receive or store your terminal output, commands, files, prompts, agent sessions, API keys or settings. The app has no user accounts, crash reporting, analytics or telemetry. Everything it stores — settings, layouts, workspaces, session state — stays in files on your device, and you can delete it at any time by removing the app and its data folder.

A few features contact third parties directly from your device. We are not in the middle of these requests and do not see their contents. Each provider handles your data under its own privacy policy.

• Updates: the app checks GitHub for new signed releases and downloads them from GitHub. GitHub sees your IP address.
• Agent version checks: to tell you when an installed AI CLI is outdated, the app asks the public npm and PyPI registries for the latest version of that package.
• Usage meters: to show your Claude Code or Codex plan usage, the app reuses the sign-in credentials those tools already saved on your computer and sends them only to their own provider (Anthropic or OpenAI).
• AI prompt helpers (optional): if you add an OpenRouter API key, the text you ask the app to clarify or name is sent to OpenRouter and the model it routes to. Without a key, nothing is sent.
• Agent installers: when you choose to install an agent, its official install script is downloaded from that vendor.
• Browser panes and AI agents: websites you open and agents you run (Claude Code, Codex, Gemini and others) connect to their own services under their own terms. What you send them is between you and them.

Issues, discussions and pull requests on our GitHub repository are public and hosted by GitHub under GitHub’s privacy statement. Do not post secrets, API keys or personal data there. If you email us, we use your address and message only to reply, and delete them when no longer needed.

We do not sell, rent or share personal data, and we do not use it for advertising or profiling. We disclose data only if required by law.

Some providers mentioned above (such as GitHub) process data outside the EU/EEA. Where they do, they rely on safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

Depending on where you live (including under the GDPR, UK GDPR and California’s CCPA/CPRA), you may have the right to access, correct, delete, restrict or export your personal data, to object to its processing, and to not be discriminated against for exercising these rights. Contact us at GitHub Issues and we will respond within 30 days. You can also complain to your local data-protection authority. Because we hold almost no data about you, most requests will be answered by confirming that.

Releases are cryptographically signed and the app only installs updates signed with our key. The site is served over HTTPS. No system is perfectly secure; report vulnerabilities to GitHub Issues.

The app and site are not directed at children under 16, and we do not knowingly collect their data.

We may update this policy. The date at the top shows the latest version; material changes will be noted in the release notes or on this page.