Privacy Policy

Last updated: June 2026

What we collect

When you sign in, we collect:

Account data — your name and email address from Google OAuth
Session metadata — when agent sessions start and end, guardrail events, action counts
Extension telemetry — extension version, IDE type (VS Code / Cursor / Antigravity), workspace identifier (hashed)

We do not collect your source code, file contents, or the content of agent prompts/responses.

What runs locally

The Primer daemon runs entirely on your machine. The following stays local and is never sent to our servers:

.primer/context.md.primer/rules.json.primer/audit.logworkspace file paths

How we use your data

To authenticate you and sync session state across your machines
To provide the live feed on workspace share links you generate
To improve Primer (aggregated, anonymized usage statistics only)

We do not sell, rent, or share your data with third parties for advertising purposes.

Data storage

Cloud data is stored in Supabase (EU-West region). Session metadata is retained for 90 days, then automatically deleted. You can delete all your data at any time by emailing us.

Third-party services

Supabase — authentication and session storage
Vercel — web hosting and serverless functions
Google OAuth — sign-in only; we receive your name and email

Your rights

You can request deletion of all your data, export of your session metadata, or withdrawal of consent at any time by contacting us at hello@primerctx.com.

Cookies

We use a single session cookie to keep you signed in to the Primer web interface. No tracking or advertising cookies are used.

Changes

We will notify you of material changes via the extension or website. Continued use constitutes acceptance.

Contact

Questions about privacy? hello@primerctx.com