Legal
Privacy policy
Effective and last updated September 4, 2026.
This policy explains how Shannon Labs handles information when you use Codewhale.
Information we collect
We collect the identity information needed to create and protect your account, including your GitHub identity, display name, and a primary verified email when GitHub makes one available. We also store product information you create, such as preferences, projects, conversations, Work runs, approvals, and security or operational receipts.
How we use it
We use this information to authenticate you, operate and secure Codewhale, preserve your requested product state, provide support, and—only when you have enabled the relevant communication—send product or waitlist updates. We do not sell personal information.
Storage and processing
Codewhale is one global product. There is no residency selector, no region-specific account, and no promise that your account data stays in a particular jurisdiction. Account authentication and session state is stored in Cloudflare Durable Objects, today configured in Cloudflare’s US jurisdiction; that placement is an operational choice we may change, and we will update this policy when we do. Durable product state is owned by Codewhale’s private product runtime. Cloudflare may perform TLS, request routing, and cryptographic processing on its global edge, so we do not describe edge processing as US-only. Hosted compute is a separate system from account storage and, when enabled, identifies its placement before launch.
Anonymous usage counting
Codewhale counts anonymous product usage by default. On this website that means plain totals of page views, documentation views, install-command copies, and downloads, sent with a random install identifier that rotates every 90 days to Codewhale’s own endpoint; Codewhale may pass those totals to PostHog as a processor. No page addresses, referrers, account, or content are included. In the Codewhale runtime and app the same rule covers aggregate version, platform, session, feature, and error counts, which never include conversations, code, prompts, files, repository or branch names, model content, or credentials. You can turn counting off at any time: for this browser on this page, in the app under Settings, or in the runtime with `codewhale config set telemetry false` or CODEWHALE_TELEMETRY=0. An opt-out is kept and never silently reversed, and presenting this notice does not record any acceptance on your behalf.
Model providers and repositories
Codewhale sends content to a model provider only when you choose or connect that provider. Bring-your-own provider credentials remain separate from Codewhale billing. Repository access is limited to the grants you approve with the source provider.
Retention and deletion
You can review export and deletion controls after signing in under Account, Data & privacy. Content is deleted according to the displayed retention and deletion process. Privacy-minimal security, audit, deletion, and financial receipts may be retained when necessary to prove an action, prevent abuse, or meet legal obligations. Provider-backed resources are not treated as deleted until the provider confirms deletion.
Questions and requests
Use Account, Data & privacy after signing in to request an export or deletion. If you cannot sign in, use the public support channel shown in the product once it is verified. Codewhale does not present an unverified mailbox as monitored.
Changes
We may update this policy as the product and its processors change. The effective date above identifies the version that applies.
Usage counting on this site
This site counts page views, documentation views, install-command copies, and downloads as plain totals. Counting is on by default. Only those totals leave your browser — no page addresses, referrers, account, or content — sent to Codewhale's own endpoint, which may pass them to PostHog. A random install id, unrelated to you, rotates every 90 days.
Turning it off is kept in this browser and clears any queued counts and the install id. Nothing here records that you accepted anything.
In the Codewhale app, use Settings → Usage data. In the terminal runtime, run codewhale config set telemetry false or set CODEWHALE_TELEMETRY=0.