Nibblets is made by Infrawrench LLC ("we"). This policy covers this website, the Nibblets apps, and Nibblets Connect at app.nibblets.dev.
Your nibblets stay on your computers
Nibblets is software you run yourself. Your nibblets, their conversations, memories, files, schedules, and the logins you share with them live on the computers you run them on. We don't receive any of it, and we have no way in.
Your nibblets talk to the AI providers you choose (such as Anthropic, OpenAI, or the providers you set up in OpenCode) using your own subscriptions or keys, and to whatever websites and tools you let them use. Those services handle that data under their own terms and policies, not ours.
Nibblets Connect
Connect is optional. It lists the computers you've linked to your account and hands out short-lived credentials so your browser can talk to each one directly. To do that, it keeps:
- Your account: your name, email address, and sign-in details, held by our sign-in provider, Clerk. If you sign in with Google, Google tells Clerk your name, email address, and profile picture.
- Your linked computers: the name, hostname, and operating system you link, the Nibblets version and how many nibblets it runs, the addresses it can be reached on (local network, Tailscale, and tunnel addresses), when it last checked in, and the IP address and rough location it was linked from.
- Notifications, if you turn them on: each device's push subscription and a label for it. When a nibblet needs you, its computer sends the notification's title and text through Connect to your browser's push service (run by Apple, Google, or Mozilla, say).
Connect isn't in the way of your nibblets' data: your browser reaches your computers directly. If you use a Cloudflare tunnel to reach a computer from anywhere, that traffic passes through Cloudflare's network.
This website and the apps
This website has no analytics or advertising and sets no cookies. Like any website, our host (Cloudflare) sees your IP address and the pages you request, and the site's fonts come from Google Fonts. Downloads and update checks go to GitHub, where our releases are published.
Who handles data for us
- Cloudflare: hosting, the Connect database, DNS, and tunnels.
- Clerk: accounts and sign-in.
- Google: sign-in with Google, if you choose it.
- GitHub: downloads and updates.
- Your browser's push service: notifications, if you turn them on.
We don't sell your data or use it for advertising.
How long we keep it
A linked computer's details are kept until you remove it from your account, or unlink it on the computer itself. Push subscriptions are kept until you turn notifications off on that device. Your account is kept until you ask us to delete it, which deletes everything above.
Your rights
You can ask us for a copy of what we hold about you, to correct it, or to delete it, by emailingastrid@infrawrench.com. Depending on where you live, you may also have the right to complain to your data protection authority.
Changes
If we change this policy, we'll update the date at the top. If a change matters, we'll say so in the app or by email first.