Know what stays, and what is sent.
How Waggle It processes account and workspace information. Updated 2 November 2026.
Your account and security
The server stores your name, email address, a password hash, consent records, and session records. Passwords are hashed with Argon2id. Passkey public keys are stored to verify sign-in; fingerprints, face scans, device PINs, and passkey private keys are not sent to Waggle. Authenticator setup secrets are encrypted on the server. Recovery keys and backup codes are stored as hashes. Email addresses are not verified in this release; email reset delivery is not connected.
Your workspace
Chats, project notes, imported files, and preferences are kept separately for each account in this browser. They are not cloud-synced or encrypted at rest in browser storage. Signing out ends your server session but leaves browser records on the device. Someone with access to your browser profile or device may access that storage.
When you ask a question
Your prompt and enabled conversation context are sent to the backend to prepare a reply. Search queries can be sent to configured search services. Source excerpts may be included with model requests. Imported text files use browser-based excerpt search. Public GitHub imports contact api.github.com. Opening a source link contacts that website.
Server processing and retention
Operational logs, rate-limit records, and search caches can be processed to run and protect the service. The existing search backend may also retain queries and generated answers in development datasets. This release does not verify training of model weights from those datasets. There is no in-app server-record deletion or training opt-out control. Do not submit confidential or sensitive information to this preview. Clearing browser data does not erase server records or records held by third parties.
Marketing is your choice
The marketing checkbox is optional and unchecked by default. We record whether you consent, when, and the notice version. You can withdraw consent in Account & security → Communications. This release records preferences but does not send marketing campaigns. Security and service communications, if enabled, are separate from marketing. Cookie choices do not subscribe you to email.
Cookies
An essential, HTTP-only session cookie keeps you signed in for up to seven days. We also save cookie preferences and workspace content in browser storage. No advertising or analytics integration is installed on these pages. See Cookies & storage.
Your choices
You can export workspace data, manage saved memory, revoke sessions, remove passkeys, change marketing consent, or clear browser storage. For account deletion or privacy requests, contact Waggle through the official contact page. Identity verification may be required. Applicable privacy rights and retention obligations depend on your location and relationship with Waggle; this notice does not promise immediate removal from logs or backups.
More information
The service uses cloud hosting and may process information outside your country. No internet service can guarantee absolute security. This preview is not intended for children or regulated sensitive data. Read Waggle’s general Privacy Policy for additional business privacy information.