Website account privacy
2026-10-20
What we collect
For sign-in, we store your email or basic GitHub/Google profile and a secure session. Connected desktops upload supported tool name, token count, event time, hashed deduplication key and random device ID; conversations, paths, raw logs and third-party credentials stay on your device. Your email is not added to the public leaderboard.
What it is used for
These details identify your website account, send sign-in codes, maintain sessions and let you sign out or delete the account. A verified email code can open an existing website account with that address. We request basic profile and email permissions only, not access to repositories, Gmail or Drive. Authentication uses an essential HttpOnly cookie; there are no advertising cookies on this page.
Your choices
Website sign-in is optional. Local monitoring uploads nothing by default. Connecting a desktop starts private usage sync and backfills readable history. Joining the public leaderboard is separate and publishes only nickname, rank, usage and sync time. Guests can join from one device without an account.
Storage and deletion
The website and account database are hosted on Cloudflare. Resend delivers email codes; GitHub or Google process their sign-in requests. Private account usage and per-device sync records are kept until account deletion, including after a device is disconnected; guest public events are kept for up to eight weeks. Deleting your account removes its cloud usage, board entry, connections and sessions from the active database; local logs remain on your devices. Cloudflare recovery copies follow the service’s retention period.
Account help
You can sign out and delete your website account from its account page. If you can receive email at the account address, request a fresh code to sign in. For GitHub or Google issues, check that provider’s account recovery options.