Privacy policy

This website

Controller: Thomas Ulrich, Herrgasse 5, 5231 Schalchen, Austria, support@watchbird.app.

Hosting. This website is hosted by Vercel Inc. (USA). When you open a page, Vercel processes server log data: the IP address of your device, date and time of the request, the address requested and the amount of data transferred, the HTTP status code, the referring page where one exists, and browser type and operating system. This is needed to deliver the website securely and reliably (Art. 6(1)(f) GDPR). Vercel keeps these logs only briefly.

No cookies, no analytics. The website sets no cookies, runs no analytics or tracking and loads nothing from other servers: fonts, images and the video come from watchbird.app itself. If you pick a language, your choice is kept in your browser's local storage (watchbird-lang); it never leaves your device.

Microsoft Store. The "Get" buttons link to the Microsoft Store. What happens there is covered by Microsoft's privacy statement.

Your rights. You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR); an informal e-mail is enough. You can also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at).

The Watchbird app

Last updated: 27 September 2026

Watchbird ("the app") is a Windows app that shows what AI coding agents (such as Claude Code, Codex CLI, GitHub Copilot CLI, Gemini CLI, Cursor, OpenCode, Qwen Code, Factory Droid, Cline and Devin) are doing and lets you answer their requests. This policy explains which data the app handles, where it goes and how long it is kept.

Responsible: Thomas Ulrich, Herrgasse 5, 5231 Schalchen, Austria, e-mail support@watchbird.app.

The short version

• No account, no server of our own, no telemetry, no analytics, no crash reports, no advertising.
• We (the publisher) receive no data from the app. Everything the app processes stays on your PC, except the network connections listed below, which go directly from your PC to the service named there.

What the app processes on your PC

• Agent events. When you connect an agent, the app adds entries to that agent's own hook configuration (for example ~/.claude/settings.json); a backup of the file is made before every change. The agent then sends events to the app through a local named pipe that only your Windows user can open. Events can contain prompts, commands, file paths, diffs, questions and plans. The app uses them in memory to show the notch and its cards. They are not written to disk at the normal log level; only with the diagnostic switch --debug are shortened excerpts written to the local log.
• Settings: %LOCALAPPDATA%\Watchbird\settings.json. Secrets you enter (Telegram bot token and chat ID, ntfy access token, license key) are encrypted with Windows DPAPI for your Windows user.
• Logs: %LOCALAPPDATA%\Watchbird\logs, one file per day, deleted after 7 days; event types, IDs and durations, no prompts, code or diffs. The hook bridge writes errors only to %USERPROFILE%\.watchbird\logs.
• Attachments: files you drop on the notch or attach to a new task are copied to %USERPROFILE%\.watchbird\attachments and deleted automatically after 30 days.
• Backups of agent configuration files: %USERPROFILE%\.watchbird\backups (the last 10 per agent).
• History: for each finished session the History tab keeps the agent, the session title, the project folder, start and end time, the number of approvals, questions, plans and errors, and the first line of the last error. Stored only on your PC in %LOCALAPPDATA%\Watchbird\history and deleted automatically after 90 days. You can switch the history off or delete it at any time (Settings → Notifications → "Keep a session history" / "Clear history").
• Other local data: a daily request count for Gemini CLI in the app's cache folder; for the direct version a second, encrypted copy of the trial start date in HKEY_CURRENT_USER\Software\Watchbird; the "Start with Windows" entry; temporary start scripts for new tasks in %TEMP%\Watchbird\launch (deleted after one day).
• Clipboard: to type a follow-up message into a terminal, the app briefly puts the text on the clipboard (excluded from the Windows clipboard history) and restores the previous content afterwards.
• Diagnostics: "Copy diagnostics" (Settings → General) only copies a report to your clipboard – version, system, agent and hook status, settings without secrets and the last 200 log lines with secrets removed. Nothing is sent; you decide whether to paste it into a support request.

Network connections

The app connects to the internet only for these features, each directly from your PC:

Like any internet connection, these requests reveal your IP address to the server you connect to.

Your data, your control

• Turn off usage queries, phone notifications and the update check in the settings at any time.
• Settings → Agents → "Remove all hooks" removes the app's entries from every agent configuration.
• Uninstalling the app removes its program files; you can delete %USERPROFILE%\.watchbird and %LOCALAPPDATA%\Watchbird to remove all remaining local data.
• Because we receive no personal data from the app, we cannot view, export or delete any data of yours. If you contact us (for example with a diagnostics report), we use your message only to answer it and delete it when it is no longer needed. Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with a supervisory authority.

Children

The app is a developer tool and is not directed at children.

Changes

We will update this policy when the app's data handling changes and note the date above.