legal/privacy

Privacy Policy

What the client reads, what we store, and what never leaves your machine. Written to be read, not skimmed.

Last updated 2026-06-22

The core promise

The client reads one bit: whether the agent is thinking. It watches the status-line / spinner state and nothing else. It never reads your code, prompts, completions, file contents, terminal scrollback, environment variables, or keystrokes. None of that is collected, transmitted, or stored.

Overlay adapters (for editors and apps where we can't read the status line directly) read only the OS accessibility is-thinking signal - a single boolean exposed by the accessibility tree. They do not read window contents, document text, or input.

Data we collect

account email
Used to sign you in, send payout and account notices, and contact you about the service.
impression & earning records
Counts of ads shown, timestamps, and the resulting credit. These are numbers and identifiers, not content.
hashed IP
We hash your IP address for fraud and abuse prevention (deduping impressions, catching bots). We never store your raw IP.

Payments

Stripe handles all payments, payouts, and identity verification (KYC). When you connect a payout account or fund an advertiser wallet, your financial and identity details go directly to Stripe under their privacy policy. We do not store card numbers or government IDs.

Cookies

We use a session cookie to keep you logged in. It is strictly functional - no advertising, cross-site tracking, or third-party analytics cookies are set by us.

Retention

We keep account and earning records for as long as your account is active and as long as required for tax, accounting, and fraud obligations. Hashed IPs used for fraud prevention are retained only as long as needed for that purpose. You can request deletion of your account; records we are legally required to keep are retained until that obligation lapses.

Contact

Questions, access requests, or deletion requests: privacy@spinwait.xyz.

See also our Terms of Service.