Privacy and data
Warshall keeps your work on your disk. This page says what is stored where, and what the app sends anywhere else.
On your machine
Your project list, terminals, the conversations each terminal had with an agent, the WorkMaps and their history, worktrees, build scripts, prompts, skills, attachments and settings all live in one data folder on your disk. So do the sign in files of the coding agent accounts you link through the app. Your project folders are read in place and never copied anywhere else. See The data folder.
No Warshall server receives your code, your prompts, your conversations or your maps. The app works fully without a Warshall account.
Your agents
Warshall runs the coding agent command line tools you already use, with the accounts you sign in to yourself. Your prompts and your code go from your machine to those providers under their own terms, exactly as they would from a terminal. Warshall does not sit in that path and does not receive a copy.
What an account stores
A Warshall account holds your name, your email address, a hash of your password, the sessions you have open, and the devices you signed in from with the name each one reported. A project never leaves your machine through the account. Deleting the account removes the account record, its sessions and its devices.
The mobile remote
While the remote is on, the desktop and the phone both connect outward to a relay, which forwards frames between them. Every frame is encrypted between the two devices with a key the relay never holds.
- The relay keeps each session, which is the two device ids, the two public keys, the phone’s model, system and app version, and the address and approximate place it last connected from. It keeps them for thirty days after the phone last connected, and never keeps transcripts, pictures, maps or prompts.
- Push notifications carry an event type and opaque identifiers, never content.
- The phone stores its link to the desktop and nothing else. What it shows came from the desktop and is gone when the link is.
Turning the remote off on the desktop or closing the desktop app leaves the phone with nothing to read. Removing the phone under Sessions, or Disconnect on the phone, ends its session and empties it. Mobile remote covers the switch, the projects list and the sessions.
Usage and error counts
The app sends a small set of counts so that broken releases get noticed. Each batch carries the app version, the operating system, and a random installation identifier that is not tied to your account. The counts cover these events.
- The app starting and quitting, and the window gaining or losing focus.
- A run starting, finishing or being stopped, with the provider, the model, how long it took, its token counts and cost, and why it stopped.
- A build finishing or failing to start, a review or a comment being created, a WorkMap being generated, an automatic commit, and an approval being allowed or refused.
- Which Settings tab was opened, the WorkMap being opened, and a new terminal.
- App errors, with the error’s name, a scrubbed message, and the function and file name where it happened.
Free text, such as an error message, is scrubbed before it is sent. Web addresses, email addresses, anything shaped like a path, and anything in quotes are replaced. Prompts, code, file names, paths, project names, branch names, email addresses, tokens and conversation text are never sent. The counts are kept for ninety days.
The switch is Usage and error counts, in Settings > Harness. Off means nothing is recorded and nothing is sent.
Your choices
- Turn Usage and error counts off in Settings > Harness.
- Turn the mobile remote off in Settings > Mobile Remote, or remove a phone from its Sessions list, which empties that phone.
- Untick a project on that same tab to keep it off the phone while the remote stays on.
- Sign any device out of your account, or delete the account, from the account page.
- Delete the app’s data folder to remove what the app keeps. Your project folders are not touched.
The Privacy Policy is the full statement, including the website and how long each thing is kept.