Legal

Privacy policy

Last updated 28 October 2026. anywhere, at anywhere.so, is run by DigitalCarbon Inc. Questions about this policy go to [email protected].

What we keep

• Your account: the ID your sign-in provider, Google or GitHub, gives your account there, the verified email it gives us, and the username you choose. We never see your password with them. If you stop signing up before choosing a username, we keep that ID and email until the unfinished sign-up expires.
• Your apps: the files you and your agents upload, what your apps write to their disks, their settings and secrets, their logs, and the people you share each one with, by email and role. Secrets are encrypted.
• Sessions and tokens: a cookie that keeps you signed in for 30 days, and the tokens your agents use, which you can revoke.
• A record of changes: each deploy, share and other change to your apps, who made it and when.
• Usage and billing: what each of your apps uses, hour by hour, and what each hour comes to, which we keep even after you delete the app; your plan; the top-ups you buy, by amount and date; and Stripe’s IDs for you as its customer, for your subscription and for each top-up’s payment. Never your card details or your billing address.
• Our own logs: our programs record requests and errors by ID, never your file names, your files’ contents or your email. Your apps’ logs stay with your apps and never go into ours.

What we don’t do

• We don’t sell or rent your data, show ads, or track you across other sites.
• anywhere.so loads no scripts or fonts from anyone else. Its analytics and error reports, below, are code we serve ourselves, sending only to PostHog and Sentry.
• People who work on anywhere look at your apps’ files or data only when you ask us to, to keep the service running or secure, or when the law requires it.

Who else sees it

• The people you share an app with see that app and your username. Your apps learn the username and role of whoever opens them, never their email.
• The companies anywhere runs on: Cloudflare, which carries the traffic to anywhere.so and api.anywhere.so and sees your IP address; Google Cloud, where the service runs and your data is stored; and Google or GitHub, when you sign in with them.
• Stripe and Link, when you buy Pro or a top-up: you pay on Stripe’s checkout page, and Link, from Stripe, sells it to you. Your payment details, billing address and email go to them, not to us, and their own privacy policies apply. We tell Stripe only an ID for your anywhere account, so its events reach the right account.
• PostHog and Sentry, for analytics and error reports, below.
• Authorities, only when the law requires it.

Analytics and error reports

anywhere.so and the portal send what you do on them to two companies in the US, so we can see what works and what breaks:

• PostHog records the pages you open, what you click, how long pages take, and a replay of each page as you saw it. The replay hides what you type, your apps’ names and the people you share with, and leaves out your apps’ logs, your agent tokens, sharing and sign-in codes altogether. It keeps a random ID in your browser’s storage, not a cookie, and once you sign in, your username. It sees your IP address, from which it works out a rough location.
• Sentry receives the errors the pages hit: what kind of error it was, where in our code it happened, your browser, and the page’s address. Never what the error said, which could name your apps or the people you share them with.
• Before anything leaves your browser, we take your apps’ names out of addresses, and everything after a ? or #, which can hold sign-in codes.
• Neither sees your apps’ files, data or secrets, or what the anywhere CLI and your agents do.

Turning analytics off needs JavaScript.

Cookies

Only the ones sign-in needs: a session cookie on anywhere.so, and one for each app you open, on that app’s own address. No advertising or analytics cookies: PostHog’s random ID is in your browser’s storage instead.

How long we keep it

We keep your account and your apps for as long as your account exists. When you delete an app, its address, its shares and its name go at once, but its files, settings and secrets stay on our servers, where nothing reaches them, until we purge deleted apps; ask us, below, to erase them sooner.

Your choices

• See and change your apps, shares and agent tokens in the portal or with the anywhere CLI.
• Copy your apps’ files out at any time with anywhere pull.
• Delete an app in the portal or with anywhere apps delete. To have a deleted app’s files and secrets erased, or your account and everything in it deleted, email [email protected] from the address on your account.

Children

anywhere isn’t for children under 13, and we don’t knowingly keep their data.

Changes

When this policy changes, we’ll post it here and update the date above. For a change that matters, we’ll tell you before it applies.