Privacy

22 September 2026

Read what asterplant.dev stores about you and why. The privacy policy covers the website and its accounts.

Account data we store

• Your name and your email address.
• If you use a password, we store a salted hash of your password. We never store the password itself.
• If you use Google or GitHub, we store the account id from that provider. We also store your name, email address and profile picture link.
• We store the provider’s sign-in tokens in encrypted form. The site never uses those tokens to act for you.
• For each website sign-in, we store a session token and its expiry time. We also store your IP address and your browser’s user agent.

Data requested from Google and GitHub

We request only your basic profile and email address. Google permissions are openid, email and profile. GitHub permissions are read:user and user:email. The site reads no other data and posts nothing.

What the site does not do

• The site has no analytics, advertising or tracking scripts. The page loads no content from another host.
• We do not sell or share your data.

Payment

Stripe handles every payment. Your card details go to Stripe and never reach asterplant.dev. We store your Stripe customer id and your plan. We also store whether it is active, and when the paid month ends.

Cookies

The site uses only sign-in cookies. These cookies keep you signed in and protect sign-in from forgery.

The app’s built-in agent

When the Asterplant app is signed in, its built-in agent sends short questions through asterplant.dev. An outside AI model provider runs the model and answers them. A question carries one of five things.

• To sort a file in the Artifacts panel. The question carries its name, its two parent folders and its first 40 lines, up to 4 KB. The question also lists up to 40 other names in the file’s folder and in the folder above. The app never sends a file whose name marks it as holding passwords or keys.
• To learn a rule: the messages you type to an agent, one at a time or two to compare. A question about one message also carries the project folder’s name.
• To sort your requests in Agent Usage. The question carries one message you typed, the reply before it and the project folder’s name.
• To group working folders into projects. The question carries a folder’s path, its Git repository and the first message typed there. It also lists your projects.
• To colour the bubble on a project tab. The question carries the agent’s last reply and names the agent. The app asks only while that project’s window is in the background.

The app reads your messages and the agents’ replies from the agents’ own logs on your computer. Each message is cut to 300 characters, and each reply to 1,200. Anything that looks like a key is removed, and so is your user name in a folder path. The app keeps none of this text after it sends a question.

The last four kinds of question carry your conversations. You can keep them on your machine by setting rule mining to local in the app’s settings. The app then sends none of them.

asterplant.dev passes each question on and does not store it. For each account, it stores the month’s model spend and the month’s number of requests. It also counts requests in the current minute and the current day. The app shows the spend as a percentage of your quota.

The app signs in with a session token kept in your operating system’s credential store. Signing out in the app ends that session. So does deleting your account.

Where account data is stored

Cloudflare runs the site and stores the account database.

Deleting your account

Sign in on the account page and press "Delete account". Deleting your account also deletes its sign-in sessions and links to Google or GitHub.