Privacy notice

What the hub keeps

• Your email address, your handle, and when you accepted the terms.
• Sign-in codes and links, as hashes only. They are deleted a day after they expire.
• Browser sessions and sync tokens, as hashes only, with when each was made and last used. They are deleted 30 days after they end.
• The records you sync: the page rb writes and its manifest, plus the record bundle when you send it.
• Share links you make, with how often and when each was last opened, and whether you let its readers rerun the record.
• Counters that enforce the limits. They hold a hash of an email or IP address, never the address itself, and are deleted soon after their window ends.
• A hash of each network you sign in from, kept for 30 days. Sign-in emails asked from other networks are limited more.
• Reports you send from the report page: what the page shows before you send it, your words, and a reply address if you give one.

There are no passwords. The hub sets two cookies, both for signing in: one ties a sign-in email to the browser that asked for it, and one keeps you signed in. It sets no tracking or advertising cookies.

Who can see a record

Only you, signed in. Anyone with a share link you made sees the page rb wrote for that record, and only that page, unless you let readers rerun it. Then they can also download the record bundle, which holds the full record: who made each write, the agent sessions and models, your words, and machine names. That page can show commands, host values, short commits and quotes from your files. Revoke the link to stop it.

Who handles your data

• Cloudflare runs the hub, the website and e.rabbitbrain.ai. The hub's database is in western North America, its records are kept in Cloudflare storage, and Cloudflare keeps the hub's request logs for a few days.
• Resend delivers sign-in emails, and mails each report to support.
• Cloudflare Turnstile may check a sign-in request before an email is sent.
• PostHog, a product analytics service in the US, receives the hub's events below and counts visits to the home page and the docs.
• Cloudflare Web Analytics counts visits to the home page, the docs and the sample account's pages under /demo: the page, where the visit came from, and the browser and country. It sets no cookie and keeps nothing that names you.

Your data is not sold or used for advertising.

Product events

The hub's server tells PostHog when an account is made, when it syncs its first record, when a share link is made, when you come back a day or more after signing up (at most once a day), when a report is sent, and when the hub could not finish a request. That last event holds the error ID, the route and the kind of error. These events show whether the hub works and where it breaks.

An event names your account only by a one-way hash of its internal id. It never holds your email, your handle, a record's title or anything in a record. Apart from the /demo pages, which Cloudflare Web Analytics counts, no hub page loads an analytics script: not your records, your account or a share link. The hub itself does not record which of its pages you view or what you click on them.

Visits to the home page and the docs

The home page and the docs tell PostHog about each visit, through our own address e.rabbitbrain.ai: the page's address and title, the site that linked to it if your browser shares that, how long you stayed and how far you scrolled, how fast the page loaded and how much it shifted as it loaded, your browser, operating system and kind of device, your screen and window size, your language and your time zone.

This counting sets no cookie and stores nothing in your browser. PostHog links the page views that come from one browser and network on one day, using a code it makes from the date, your IP address, your browser and the site. The code changes every day, and PostHog does not keep your IP address. A browser that sends Global Privacy Control or Do Not Track sends PostHog nothing. The docs keep your light or dark choice and how you left their sidebar in your browser. They never send either.

Deleting

You can delete a record or your whole account. Deleting an account removes your email, handle, sessions, tokens, records and share links, and the reports you sent signed in or with its address. A report already mailed to support stays in that mailbox. A count of what was deleted is kept, with nothing that names you.

Contact

Write to support@rabbitbrain.ai for support, abuse reports and requests about your data.