Privacy

The short version

• Your code, prompts, transcripts and keys stay on your computers. wsp has no account and keeps none of them, unless you link the relay described below.
• Your agents talk to their own companies, such as Anthropic, OpenAI or Cursor, under your sign-in and their terms. wsp does not sit in between.
• The app sends anonymous usage counts to PostHog. You can turn them off.

This website

• usewsp.com is served by Cloudflare, which sees each request (address, browser, page) as any host does.
• PostHog counts visits in its cookieless mode: page views, clicks and the page you came from, processed in PostHog's EU cloud. Nothing is stored in your browser, and usewsp.com sets no cookies.
• If you join the Windows waitlist, your email goes to Resend. We keep it until we announce Windows, then delete it. Ask and we remove it sooner.
• The docs are hosted by Scalar, which may set one cookie the docs need to work.

The app and the command line

• Usage counts go to PostHog's EU cloud: which agent and model a thread used, how its turns ended, their length, tokens and cost, how many projects and computers you have, your wsp version and system. Each carries a random install ID, never a path, prompt, file, name or key. Turn them off in Settings, Privacy, or with WSP_ANALYTICS=0.
• Update checks ask GitHub for new wsp releases, and npm, GitHub and Anthropic for each agent's newest version. WSP_UPDATE_CHECK=0 stops them. The app downloads its own updates from GitHub.
• Icons. To draw a remote tool server's icon, its host name is sent to Google's icon service. Settings, Privacy turns this off.
• The Usage page downloads a model price table from GitHub. Searching for skills sends your search words to skills.sh. Images in replies and pull request avatars load from wherever they are hosted.

Computers you add

Setup copies what you pick over SSH to your own computer: agent settings, tool servers, skills, and git and shell settings. Sign-in files are never copied; you sign in on that computer. Your GitHub token is copied unless you choose to sign in there or skip GitHub. Removing a computer deletes wsp's own files there; your work folder and the sign-ins you made there stay.

The relay, if you use it

The relay lets you reach a computer from anywhere. If you link it, we keep your GitHub user ID and login on Cloudflare until you ask us to delete them, and your computers' names, key fingerprints and when each was last seen until you unlink them. A connection through the relay passes through Cloudflare, which can read it on the way. Write to us to delete your relay account, or run your own relay.

On your own computers

wsp keeps transcripts, settings and usage history in its folder, and your keys in a file only your user can read. The keys are not encrypted and wsp never writes to your Keychain. Deleting a thread removes wsp's copy; the agent's own session files stay in the agent's folder.

Companies involved

• Cloudflare: this website, its DNS, the relay.
• PostHog: usage counts and website visits, in the EU.
• Resend: the Windows waitlist.
• GitHub and npm: downloads, releases, update checks, relay sign-in.
• Google: icons, and email at usewsp.com.
• Scalar: the docs.

Your rights

You can ask for a copy of what we hold about you, for a correction, or for deletion, by writing to aditya@usewsp.com. We answer within 30 days. wsp is not meant for anyone under 16.

Changes

When this page changes, the date at the top changes with it.