NerfedLab is a local-first desktop studio. This policy explains what we collect and — just as importantly — what we don't. The short version: your work stays on your machine, and we collect the minimum needed to run accounts, anonymous crash reports (on by default, easy to turn off), and — only if you opt in — anonymous product analytics.
What we collect
- Account information — when you sign in with Google: your name, email address, Google account identifier, and avatar. Used for identity, licensing, and access to the beta.
- Beta registration — name, email, country, optional organization, and what you want to build. Used to manage beta invitations.
- Product analytics (optional, off by default) — if you turn it on, anonymous usage events (for example, app launched or project created), your app version, and operating system. Metadata only — never the content of your work. Processed by PostHog.
- Crash reports (on by default, opt-out) — when the app crashes or fails to shut down cleanly: error diagnostics and crash dumps with home-directory paths and usernames scrubbed, plus the app version and operating system. Never the content of your work. Processed by Sentry. You can turn this off at any time on the app's welcome or sign-in screen.
What we don't collect
The content of your projects — your designs, source code, prompts, chat messages, and files — stays on your device and never touches our servers. Your AI prompts and their outputs travel directly from your machine to Anthropic through your own Claude subscription. We are not in that path; Anthropic's privacy terms govern it.
Service providers
We share data only with the providers that make the product work, and we never sell it:
- Google — sign-in.
- Anthropic — your Claude subscription powers every AI turn (their terms apply).
- PostHog — only if you opt into product analytics.
- Sentry — crash reports, unless you opt out.
- Supabase — stores your account and beta-registration data.
- Vercel — hosts this website.
Your choices & rights
- Product analytics is opt-in; crash reporting is on by default — both can be toggled at any time inside the app.
- You can request access to, correction of, or deletion of your account data (including GDPR / CCPA requests) by emailing privacy@nerfedlab.com.
- We use a single session cookie for sign-in — no third-party advertising cookies.
Changes & contact
We'll update this page and the date above when things change. Questions about privacy? Email privacy@nerfedlab.com.
Draft — grounded in how the product behaves today. Pending review, and the contact address + governing entity are placeholders to confirm before this is published.