← cueloop

Privacy

Last updated: September 18, 2026

cueloop is a terminal-first review tool for coding agents. This page explains what stays on your machine, what the hosted SSH gateway at cueloop.dev handles when you share or join a review, and what we never do with your data.

cueloop is local-first

When you review a plan or a diff, everything runs in your terminal. The artifact under review, your comments, and your code live on your own machine. None of it reaches cueloop.dev unless you explicitly share a review.

The hosted SSH gateway (cueloop.dev)

Sharing a review over SSH, or joining one someone shared with you, is the only time your data passes through our servers. Here is what that involves.

• GitHub sign-in. So your review comments carry your name, we sign you in through GitHub's device flow. We request no account or repository permissions, and we read your GitHub username once - the sign-in token is discarded immediately after that lookup. You can skip signing in and take part anonymously.
• Shared review content. The artifact and comments you share are relayed through the gateway so the people you shared with can open them, and are kept only while the share is active.
• Connection details. Your SSH key fingerprint and basic connection metadata are kept for a limited time to run the service securely and to prevent abuse.

What we do not do

• We do not sell or rent your data.
• We do not run advertising or third-party trackers.
• We do not read your code beyond what you explicitly choose to share.

Open source and self-hosting

cueloop is open source. You can run your own gateway, in which case none of the above touches our servers - your shares stay entirely within infrastructure you control.

Your choices

For questions about this policy, or to ask us to remove data associated with your account, email hello@cueloop.dev. If our practices change, we will update this page and its date above.