Privacy Policy

Effective 20 October 2026

Offshoot is built so that your code, your chats and your agents' activity stay on your Mac. This policy explains exactly which personal data the website, the Mac app, the iPhone and iPad app and the optional account and relay service process, why, and for how long.

The short version

Your code, chats and agent activity never reach us. The relay forwards them only end-to-end encrypted, and cannot read them.
The account is optional. It holds your email address, your sign-in sessions (as hashed tokens) and the names and public keys of your connected Macs and devices.
No cookies, no analytics, no ads, no tracking, no third-party analytics or crash SDKs. We do not sell data.
The website and update server keep no access logs; failed requests and the relay's connections are logged with the IP address for up to 14 days, for security.
You can delete your account in Settings on your Mac or iPhone at any time.

1. Who is responsible
2. What stays on your Mac
3. The website
4. Mac app downloads and updates
5. Your account
6. The relay
7. The Linear integration
8. Push notifications
9. The App Store
10. Emailing us
11. Processors and transfers
12. Retention and deletion
13. Your rights
14. Children
15. Changes and contact

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

Arif Dogan
Falkenberger Str. 146
13088 Berlin, Germany
Email: privacy@offshoot.cloud

In this policy, “we” and “us” mean Arif Dogan as the operator of Offshoot.

2. What stays on your Mac

Offshoot runs on your Mac. Your repositories, workspaces, diffs, databases, terminals, chats and everything your agents do are stored and processed on your Mac. We never receive them.

The agents (Claude Code and Codex) run on your Mac with your own accounts and talk to Anthropic and OpenAI directly, under your agreements with them and their privacy policies. Offshoot does not send your code anywhere itself.

When your iPhone or iPad reaches your Mac through the Offshoot relay, this content passes through our server only end-to-end encrypted, so that we cannot read it (see The relay). On your own network or over Tailscale, it does not pass through our servers at all.

3. The website

When you visit offshoot.cloud, our server necessarily receives your IP address and the information your browser sends with the request (such as its user agent and the requested page) in order to deliver the page. It uses them only to answer the request and does not keep access logs. Only a request that fails (for example, for a page that does not exist) is recorded in the server's error log, with its IP address, time and path, and deleted after at most 14 days. Legal basis: our legitimate interest in providing a secure website (Art. 6(1)(f) GDPR).

The website sets no cookies, uses no analytics, and loads no third-party scripts, fonts or embeds.

4. Mac app downloads and updates

The Mac app is downloaded from, and checks for new versions at, https://updates.offshoot.cloud, using the Sparkle update framework. These requests are handled like website requests: answered, not logged, except failed ones (see above). The update check contains no identifier for you and no tracking. Legal basis: our legitimate interest in delivering the software and its security updates (Art. 6(1)(f) GDPR).

5. Your account

An account is optional. You need one only for the relay and for the Linear integration; the apps work without it on your own network or over Tailscale.

If you create an account, we process:

Your email address. You sign in with a link we email to you; the email is sent through Amazon Simple Email Service (Amazon SES) in the AWS region eu-central-1 (Frankfurt).
An account ID that we generate.
Sign-in sessions: the name of the device you signed in on and when the session started and expires. We store only hashed session tokens, never the tokens themselves.
Your connected Macs (hosts) and iPhones or iPads (devices): their names and public keys, so that your devices can find your Mac and encrypt traffic end to end.

This data is stored on our server at Amazon Web Services in Frankfurt (eu-central-1). Legal basis: performance of the contract with you, that is, providing the account, the relay and the Linear integration you asked for (Art. 6(1)(b) GDPR).

A session is removed when you sign out on that device. Everything is removed when you delete your account (see Retention and deletion).

6. The relay

The relay forwards traffic between your iPhone or iPad and your Mac when they are not on the same network. That traffic is end-to-end encrypted on your devices: they agree on keys with X25519 and encrypt every stream with ChaCha20-Poly1305. The relay cannot read it and does not store message content.

To forward traffic, the relay knows which of your devices are connected. It keeps this connection metadata in memory while a connection is open, and in server logs (IP address and connection times) for up to 14 days for security and troubleshooting.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) for forwarding your traffic, and our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR) for the logs.

7. The Linear integration

If you connect Linear, you authorize Offshoot with Linear (OAuth). We then store, linked to your account:

the OAuth access and refresh tokens, encrypted with AES-256-GCM, and when they expire;
your Linear user ID, name and email address, your Linear workspace's ID, name and URL key, and the permissions (scopes) you granted.

Requests from your apps to the Linear API are passed through our server, which adds your token; their contents are not stored. Linear webhooks (for example, a changed issue) are forwarded to your Mac and not stored.

We keep the connection until you disconnect Linear or delete your account. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Data held by Linear is subject to Linear's own privacy policy.

8. Push notifications

If you allow notifications on your iPhone or iPad, Offshoot on your Mac sends them through the Apple Push Notification service (APNs). The notification text is generated on your Mac, and your device's push token is kept on your Mac, not on our servers. Apple delivers the notifications, including Live Activity updates, under its own privacy policy. You can turn notifications off in iOS Settings at any time.

9. The App Store

The iPhone and iPad app is distributed through Apple's App Store. Apple processes your purchase and download data under its own terms and privacy policy. Apple gives developers aggregated statistics such as download counts and, only if you chose to share with app developers, crash reports. The app itself contains no analytics or crash-reporting SDKs.

10. Emailing us

If you write to us, we process your email address and your message to answer you. Legal basis: our legitimate interest in answering your request, or, where it concerns your account, performance of the contract (Art. 6(1)(f) and (b) GDPR). We delete the correspondence when it is no longer needed, unless we must keep it by law.

11. Processors and transfers

We use these service providers, bound by data processing agreements where required:

Provider	Purpose
Amazon Web Services	Hosting of the website, the account service, the relay and the update server in Frankfurt (eu-central-1); sending sign-in emails (Amazon SES)
Cloudflare	DNS for offshoot.cloud; receiving email sent to our offshoot.cloud addresses and forwarding it to our mailbox (Email Routing)
Apple	Push notifications (APNs) and App Store distribution

Where a provider or its parent company is located in the United States, personal data may be transferred there. Such transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

We do not sell personal data, show ads, or share data with anyone for marketing.

12. Retention and deletion

Server logs (failed web requests; relay connections with IP address and times): up to 14 days. The website and update server keep no access logs.
Account data (email address, account ID, hosts, devices): until you delete your account.
Sessions: until you sign out on that device or delete your account.
Linear connection: until you disconnect Linear or delete your account.

Deleting your account: open Settings in the Mac app or in the iPhone or iPad app and choose “Delete account”. This removes your account, your hosts, your devices, your sessions and your Linear connection from our server. You can also email privacy@offshoot.cloud and we will delete it for you. Data on your own Mac stays under your control; uninstalling the app does not delete it.

13. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15),
have inaccurate data corrected (Art. 16),
have your data erased (Art. 17),
restrict processing (Art. 18),
receive your data in a portable format (Art. 20), and
object to processing based on our legitimate interests (Art. 21).

To exercise these rights, email privacy@offshoot.cloud. You also have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), or the authority where you live or work.

We do not use automated decision-making or profiling.

14. Children

Offshoot is a developer tool and is not directed at children under 16. We do not knowingly process data of children under 16. If you believe a child has created an account, email us and we will delete it.

15. Changes and contact

We will update this policy when Offshoot changes in a way that affects your data, and change the effective date above.

Questions about privacy: privacy@offshoot.cloud.