Privacy — the whole of it
We ask you to run our software next to your own work. That deserves the full answer on one page, in plain words, with the enforcement named next to each promise.
What leaves your machine
Pull request lifecycle and timestamps, CI conclusions, review states, salted hashes, counts and timings of your sessions. The exhaustive list is generated from the same schemas the software is built against and published on the traffic audit page — it cannot drift from what actually ships. Source code, diffs, prompts, file names, screenshots, keystrokes, clipboard and anything outside your work episodes never leave the machine.
Cookies
Deigma sets two cookies, both strictly necessary and first-party. During sign-in, a ten-minute anti-forgery cookie (mentat_oauth_nonce) protects the OAuth exchange and expires on its own. After sign-in, the session cookie keeps you signed in for up to 30 days, or until you sign out or delete the account. Browsing without signing in sets no cookies. Dismissing the cookie note stores one flag in this browser's localStorage so the note is not shown again; it never leaves the browser. There is no analytics script, no advertising tag, no session replay, no third-party tracker — which is why this site shows no consent banner: there is nothing to consent to.
How long data lives
Measured telemetry and episodes are kept for 24 months and then deleted by a scheduled sweep that writes an audit event with its counts. You can extend your own horizon (up to 120 months) in Settings; you cannot be extended by anyone else.
Deleting your account
Your rows are encrypted with a key that exists only for you. Deletion destroys every copy of that key — backups included — writes the audit event that recorded it, and rejects any late telemetry from that moment on. What remains in storage is ciphertext without a key.
Your rights
Export everything we hold about you from Settings at any time; the export is the same data the product itself reads. Leave with one click. A private profile is indistinguishable from a non-existent one — by response body and by response timing. No webhook, export or notification is ever triggered by anyone's score, and there is no ranked-list API.
Questions
Write to privacy@deigma.net.