Updated October 24, 2026. This notice covers the download portal and Google sign-in service at harness.rodeo.co.
We request only your Google account identity and email address (openid and email). We use your verified email, Google account identifier, and Workspace domain to check access to downloads and optional OpenRouter or DeepSeek credentials. We do not request access to your Gmail, Drive, contacts, or calendar.
Authentication runs on Cloudflare Workers. Cloudflare D1 stores short-lived login state and grants, and session records containing your email, account identifier, domain-verification result, hashed session token, and expiry. Browser sessions last eight hours; native app release sessions last thirty days. Expired records are removed by an hourly cleanup job. Signing out of the portal deletes that browser session. Secure, HttpOnly cookies are used for login and browser sessions.
Optional provider sign-in delivers an assigned or shared provider key to the native app, which stores it in macOS Keychain. The portal does not receive your chat messages. When you use a provider in the app, that provider receives the requests sent to it under its own privacy terms. Download archives are stored in private Cloudflare R2 storage.
Google processes the sign-in, and Cloudflare processes network requests, including IP addresses used for rate limiting and service security. Service diagnostics may include request metadata. We use Google identity data for authentication and access control, not advertising.
Contact linus@rodeo.co to request deletion of stored sign-in records or ask questions. You can revoke this application's Google access in your Google Account settings and remove saved provider credentials in the app.