What is stored, and how to delete it
Last updated 25 September 2026. This is a small tool run by one person and shared with a handful of testers. It is written plainly because vagueness here would be the problem.
What is collected
Only what the tool exists to show you:
- Your prompts and the agent's replies, verbatim, from sessions on machines where you installed the client.
- Entries your agent writes — findings, decisions, changes, checks, and where things stand.
-
A hash of your repository's git remote, so tasks
group by project, and the name of the repository's
folder, such as
AgentTaskLog, so each project has a name. Every upload carries the folder name. You can rename a project and your name is kept, but the folder name is still sent with each upload. -
The name of the tool that wrote each row, such as
claude-code, and the time it was written. - Your email address, from Google or GitHub sign-in, to identify the account. With GitHub, also your numeric GitHub user id, so the account is still found if you change addresses there. The GitHub access token used to read these is discarded straight after.
What is never collected
Your source code, file contents, tool results and command output are not sent. Anything matching a known secret pattern — tokens, keys, PEM blocks — is stripped on your machine before upload, and only the name of what was stripped travels with the turn, so you can see the scrubber working.
Where it lives
On servers in AWS in Mumbai (ap-south-1), in an encrypted database that is not reachable from the public internet. Backups are kept for seven days. It is not sold, not shared with anyone, and not used to train anything.
Deleting it
From Settings in the dashboard, immediately and without asking anyone. Delete everything removes every task, entry, captured prompt and response, and project name.
It opens once nothing can write to your log again: every API token revoked, and innings uninstalled on each machine. Otherwise a machine still running it would start filling the log again straight away.
Your account stays, so you can sign in again to an empty log. To remove the account itself, ask, and it will be deleted by hand.
Deletions take effect at once. Database backups age out within seven days.