Privacy
Last updated 2026-10-16. This page says exactly what this site collects, in plain words: before you have an account, when you sign up or sign in, and once you're a member.
Before you have an account
We count visits ourselves, without cookies. When a page opens, your browser tells our own server three things: which page it is, the name of the site that linked you here (just the site, such as news.ycombinator.com, never the full address), and the campaign word in the link if there is one (utm_source). Our server adds one to that day's count for that page. That's all it keeps: no IP address, no cookie, nothing that identifies you or connects one visit to another. Browsers that block scripts aren't counted.
One first-party cookie notes how you found us. On your first visit, a cookie named rs_attribution remembers the campaign tags in the link you followed, the page that linked to you and the first page you opened, for up to a year. If you sign up, your account records it, so we know which link or post brought you. Only our own sign-up reads it; it is never sent to anyone else. Clicking Decline on the cookie bar deletes it and stops it coming back.
Cloudflare carries every request. Cloudflare is the network provider in front of this site. It handles every request for security and delivery, as any network provider does, under its own privacy policy.
Our servers keep technical logs. Like any web server, ours keep access logs that include IP addresses, to keep the site running and secure. The visit count doesn't use them, and the counter's own requests are left out of our application's log.
Your browser keeps your choices. Your light or dark theme and your cookie-bar answer are stored in your own browser, not on our servers. Change your cookie choice clears the answer and shows the question again on the front page.
No analytics or advertising tags
This site loads no Google Analytics, no Google Ads, no Meta pixel and no other third-party analytics or advertising tag, before or after you click Accept. If that ever changes, this page will say so first, and nothing of the kind will load until you click Accept.
Signing up or signing in
You can create an account with an email and password, or sign in with Google, GitHub, or Facebook. If you use a password, we store your email and a salted hash of your password, never the password itself. Signing in sets one cookie that keeps you signed in; it is needed for your account to work.
If you sign in with Google, we ask only for the minimum: your basic profile (name) and email address, so we can find or create your account by that email. We never post anything to your Google account, never read anything else from it, and never see your Google password. GitHub and Facebook sign-in work the same way, scoped to just your email.
Once you're using the product
Your account record holds your email, name, and, if you provide them, a phone number and company. As a member, it also holds the continuity you and your AI save: handoffs, lanes, checkpoints, transcripts, documents, artifacts and heap snapshots.
Some of that content is sent to OpenRouter, a third-party AI provider, when you ask for something it generates. It's used only to answer that request and is tied to your account, not shared for any other purpose. Your continuity is private to your account (and your team, on Team), never pooled with or readable from another customer's account.
You can pull all of it back out while you're a member, from your account's export.
Billing
If you become a paying member, checkout happens on Stripe's own page, not ours. We never see or store your card number: Stripe handles the charge and tells us whether it succeeded. We count checkouts started, trials started and first payments by plan, so we know whether the site works for people; those counts carry no card or payment details.
Deleting your data
Email [email protected] to have your account and everything tied to it removed. We don't yet have a self-service delete button; until we do, this is the reliable way to ask.
What we do not do
We do not sell your data. We do not load third-party tracking. We do not share your account or product content with advertisers. The only outside parties involved are the ones needed to run the service itself: Cloudflare for the network, Stripe for payment, OpenRouter for AI processing, and Google, GitHub, or Facebook only if you choose to sign in that way.