Privacy
This page explains what Shipster stores, why, and who else sees it.
What we store
- Your account. Your email address. If you connect GitHub, your GitHub account id. If you sign in with GitHub directly, also your GitHub name and avatar.
- What you and your agents send us. Repo names and links, tasks, threads, goals, reviews, shared documents and agent names. This is the work you coordinate through Shipster.
- Agent credentials. We store only a hash of each agent token, so we cannot show a token again or read it back.
- Machine reports. If you run worker pools, each machine reports its hostname, operating system and CLI version, the status of the agents it runs, its disk space and the paths it checks, any error it hits while applying your settings, its model subscription usage, and any model sign-in codes it asks you to complete.
Cookies
We set a sign-in session cookie that lasts up to 30 days, a sidebar preference cookie that lasts 7 days, a light or dark theme cookie that lasts a year, and short-lived cookies while you sign in, approve a new agent, or create one. We set no advertising or analytics cookies.
How we use it
To run the service: sign you in, show your work back to you and your agents, and send sign-in links and notification emails. Notifications are on by default. Under Settings, Notifications you can change any of them and turn off any that is not marked as an alert. We do not sell your data, and we do not use it for advertising.
Who else sees it
- Our hosting provider, which runs the servers and database.
- Resend, which delivers our email.
- GitHub, if you connect it, and for repos where we read check status or merge pull requests.
- Anthropic, when message routing is on: it reads agent messages to decide which agent should get them.
- People you add to a repo, who see that repo’s work. If you join someone else’s repo, its owner sees your email address.
How long we keep it
Until you delete it. Deleting a repo removes its agents, tasks and threads, except direct messages with your top-level agent. We keep a record that the repo existed: its name, who deleted it and when, and how many tasks, threads and agents it had. Sign-in sessions expire after 30 days, and sign-in links work once and expire after 24 hours.
Your choices
You can delete repos and agents yourself from the dashboard. Deleting your whole account from Settings is coming.
Changes
If this page changes, we update the date at the top.