Privacy
What leaves your machine
Four fields, every three days. That is the entire data flow from the app to us, and it is listed here in full rather than described in the abstract.
The licence check-in, every three days
The app checks in every three days (it also checks in at start-up if three days have gone by), posting to /api/license/checkin. The body is exactly this and nothing else:
| Field | Example | Why |
|---|---|---|
| license_id | 3f2a...-...-9c1d | Which licence is checking in, so we can rotate its token and honour a removal. |
| machine_hash | a94f...64 hex | A SHA-256 hash of your Windows machine GUID and username. It ties a licence to one machine. It is one-way: we cannot recover the machine name or your username from it. |
| app_version | 0.8.0-beta.1 | So we know which builds are in use and what the update feed should offer you. |
| os_version | 10.0.26200 | So we know which Windows builds to keep working on. |
The reply is a refreshed licence token, its expiry, the licence status and the latest available version. We store each check-in with its timestamp for 90 days so you can see the device list on your account page, then it is deleted.
What never leaves your machine
- Session content of any kind: prompts, responses, transcripts, scrollback.
- File paths, file contents, diffs, repository names, branch names.
- Project names and the contents of your catalogue.
- Anything Claude Code told the app through hooks or its status line.
- Your Anthropic credentials. Ephorhelm never asks for, stores or transmits them.
- Voice audio and its transcripts. Dictation runs locally with Whisper on your CPU.
- Usage analytics. There is no analytics SDK in the app and no event pipeline.
Everything the app knows about your sessions stays in %APPDATA%\Ephorhelm and in Claude Code's own files on your disk.
The account
A licence is issued to a named person or company, so registration collects a little more than an email address. This is the complete list of what the signup form stores:
- First name and last name, and company if you give one (company is optional).
- Phone number.
- Postal address: street, a second line if you give one, city, state or region, postal code and country.
- Email address.
- A PBKDF2-SHA256 hash of your password. We never hold the password itself and cannot recover it.
- Whether the email address has been confirmed, and the date you signed up.
The name and company are printed on the licence, which is why the app can show "Licensed to" without asking us. We do not use the address or phone number for marketing, do not sell them, and do not share them with anyone; they exist so a licence names a real licensee and so we can reach you about the licence itself. Activating a machine adds a licence row: the machine hash, a friendly machine label derived from the Windows version, the app and OS versions, and the last check-in time.
A sign-in sets one cookie, eh_session, holding a random session id. It is HttpOnly, Secure and SameSite=Lax, and it lasts 30 days. There are no other cookies, no third-party scripts and no fonts, pixels or embeds loaded from anyone else - this site sends you HTML, CSS and its own images, and that is all.
Email, and who processes it
Account mail - the address confirmation, a password reset, a notice about pricing or terms, and the reply to anything you send through the contact form - is sent from a no-reply address on this domain through AgentMail (agentmail.to), which is our email processor and handles delivery on our behalf. Nothing else is shared with them, and they do not use your address for their own purposes.
We do not run a mailing list and will not add you to one. There is no marketing email. You may get a message about a change to pricing or terms, because the pricing page promises you will.
Where it is stored, and who hosts it
This site, its API and the installer downloads run on Cloudflare, which is our hosting provider. Accounts, licences and check-ins live in a Cloudflare D1 database in the United States; release binaries live in Cloudflare object storage. Cloudflare's own logs see the metadata any web request carries, including your IP address and user agent. We do not add logging on top of that, and we do not join request logs to accounts.
We do not use analytics, advertising, session recording or third-party trackers of any kind, on the site or in the app.
Deleting your account
Two ways, both of which do the same thing:
- On your account page, under Delete account. It asks for your password and then does it immediately.
- Through the contact form, if you would rather ask a person.
Deletion removes the account, the licensee details, every licence and the check-in history. Activated machines stop opening new sessions at their next check-in. There is no waiting period and no dark pattern; it is a handful of database rows going away.
Ephorhelm is published by Technoir PR, LLC, a Nevada limited liability company, and this policy is governed by the laws of the State of Nevada, USA. Questions about it go through the contact form. Ephorhelm is an independent tool and is not affiliated with Anthropic. Last updated September 14, 2026.