Privacy policy

Saggar is built to keep terminal work on your Mac. This policy explains the narrower set of data handled by the app, website, account, and remote-control services.

Effective 13 August 2026

Who controls your data

Max Clayton Clowes, operating under the Marginal Utility name, is the data controller for Saggar. Contact contact@mcclowes.com with a privacy question or request.

Data we handle

Data kept on your Mac

Saggar stores its settings, project history, command history, terminal scrollback snapshots, agent status, and local diagnostics on your Mac. It may also write project-specific Saggar files inside a project. This data doesn't leave the Mac unless you use a feature that sends it, such as remote control, opt-in crash sharing, or a diagnostic export you choose to share.

Account data

When you create or use a Marginal Utility account, the account provider Clerk handles identifiers such as your name, email address, authentication factors, session details, and security information. Saggar receives the account identifier and email address needed to display your account and check that a device pairing belongs to the same account as the Mac.

Remote-control data

When you use remote control, the relay handles account and device identifiers, connection metadata, request routing data, and encrypted network traffic. The Mac receives authorized requests and returns the requested status or terminal data. Terminal content is transmitted only to provide the remote session. The relay routes traffic and doesn't use terminal content for advertising or model training.

Pairing grants and the selected Mac's identifier are stored in your browser. Grants are also stored in the Mac's login Keychain. The Mac keeps a local security audit of remote actions, but never records typed terminal bytes in that audit. Removing a paired device revokes its grant.

Push notifications

If you enable browser push, your browser's push service supplies an endpoint and encryption keys. The Mac stores that subscription and sends encrypted alerts through the push service. The service can see delivery metadata but can't read the encrypted alert. Turning push off or revoking the paired device removes the subscription from the Mac on a best-effort basis.

Product analytics

The website uses Vercel Analytics to measure visits and basic interactions. We use this aggregated information to understand whether pages work and which parts of the site are useful. The site may also record named events when you select a download or installation option. The Mac app records when a terminal is created, including whether it is a shell, command, or agent terminal and, for agent terminals, the provider and selected model. It doesn't send the terminal's command, path, name, prompt, or output. We don't use this data for targeted advertising.

Crash reports

The hosted website sends production errors to Sentry so we can diagnose broken pages. A report may contain the page address, browser and operating-system details, app version, error message, and stack frames. We don't enable Sentry session recording, performance tracing, screenshots, or default collection of personally identifiable information.

The Mac app keeps crash diagnostics locally by default. You can separately opt in to sharing sanitized crash reports with Sentry during onboarding or in Settings. Shared reports contain the Saggar version, coarse Mac and operating-system details, loaded binary information needed for symbolication, and crash stack frames. Saggar removes free-form messages and doesn't send terminal input or output, commands, file paths, environment variables, breadcrumbs, screenshots, view hierarchies, logs, traces, profiles, or account details. You can turn sharing off at any time.

Download links and email updates

If you ask us to send a download link, we give Resend your email address to deliver that message, but don't add it to the updates list. If you separately register for updates, Resend keeps the address so we can send those messages. You can unsubscribe at any time using the link in an email or by contacting us. We don't sell the address or add it to unrelated mailing lists.

Why we use this data

We process account and remote-control data to provide the service and perform our contract with you. We process security logs, limited analytics, and error reports for our legitimate interests in protecting, maintaining, and improving Saggar. We send requested download links, optional updates, and optional Mac crash reports with your consent. You can withdraw that consent at any time without affecting earlier processing.

Who receives data

We share data only as needed with service providers that help run Saggar: Clerk for identity, Cloudflare for the relay, Vercel for website hosting and analytics, Sentry for error and opt-in crash reporting, Resend for requested email updates, and the browser push service you choose. We may also disclose data where the law requires it, to protect people or the service, or as part of a business transfer subject to appropriate safeguards. We don't sell your personal data.

International transfers

Some providers process data outside the UK. Where UK data-protection law requires it, we rely on an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. Provider privacy notices contain more detail about where they process data.

How long we keep data

We keep personal data only while it is needed for the purpose described above, to meet legal obligations, or to resolve disputes. Account data remains while your account is open and may remain for a limited backup or legal-retention period after deletion. Mailing-list data remains until you unsubscribe. Our providers keep analytics, error reports, and service logs according to their configured retention periods. Data stored only on your Mac or browser remains until you remove it, clear that storage, or uninstall Saggar.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to some uses. Where processing relies on consent, you may withdraw it. You can contact us to exercise a right. We may need to verify your identity first.

UK users may complain to the Information Commissioner's Office at ico.org.uk. If you live elsewhere, you may also have the right to contact your local data-protection authority.

Security

We use technical and organizational safeguards designed to protect personal data, including encrypted transport, account checks, explicit pairing approval, capability-limited grants, Keychain storage on the Mac, and encrypted push payloads. No system is completely secure, so keep your account and paired devices protected and revoke anything you no longer trust.

Children

Saggar isn't directed to anyone under 18, and we don't knowingly collect their data.

Changes to this policy

We may update this policy as Saggar changes. We'll post the new version here, change the effective date, and give reasonable notice where a change materially affects your rights.