Privacy policy
Last updated 1 November 2026. Sideboard is a local Mac app plus a phone relay at relay.sideboard.build.
What this covers
This policy describes data handled by the Sideboard desktop and CLI on your computer, the Sideboard phone app, and the hosted relay. The marketing site at www.sideboard.cloud does not require an account.
What we collect
- On your Mac. This Mac’s name, a host secret used to register with the relay, thread/worktree metadata, and chat you have with agents. Optional tokens for GitHub, Linear, AbleTime, Vercel, Supabase, PostHog, and Sentry also live in the encrypted vault on disk — not in the renderer or in git.
- On your phone. The pairing session for each Mac you connect (device name and a session token), stored on the phone so you can pick a desktop later.
- Through the relay. A routing token so the relay can attach the socket, plus the handshake and ciphertext. Prompt text and the phone token stay inside those frames. Signing the Mac in uses your git host (GitHub today): Sideboard stores that GitHub user id, the email GitHub returns, and a hash of each Mac’s host secret. The relay does not receive git repos, vault tokens, or VPN-only traffic.
- We do not sell message text. We do not use it to train Sideboard models — Sideboard does not host a model.
How it is used
Phone message text is delivered to the Sideboard orchestrator on the Mac you picked so you can drive agents from the phone. Agents you installed (Claude Code, Codex, OpenCode, Cursor, and others) may send that prompt text to the model provider you configured. Those providers have their own policies. Sideboard does not retain a product-side copy of those messages after they are handed to your Mac.
Where it lives and how long
- Your Mac — until you uninstall Sideboard or delete the local data directory.
- Your phone — until you forget that desktop in the app or delete the app.
- Relay — the GitHub sign-in and each registered Mac stay on a volume so a restart keeps them. Live phone sockets stay in memory; a restart drops that connection and the phone pairs again. The relay does not store prompt text.
Access, transfer, and deletion
Forget a desktop in the phone app to drop that session on the phone. Uninstall Sideboard on the Mac to drop local chats and the host secret.
To request access, export, or deletion of data Sideboard still holds (for example a leftover vault file, or a question about relay logs), email support@sideboard.cloud. That address is enough; you do not need another account. We will respond within two business days. For GDPR/CCPA-style deletion requests, say so in the email.
Contact
Privacy and data requests: support@sideboard.cloud. Also see Support and how the phone app pairs.