# Privacy

*Last updated 2026-10-12. Draft for review; contact sam@babbl-labs.com with questions.*

Agent's Notebook is a design-preview product by **Babbl Labs**. This site runs two short research surveys (one for developers, one their coding agents can fill in) and a claim page for an early-adopter discount. This page says exactly what we collect and keep.

## Human survey

- **Answers**: multiple-choice only (team size band, which tools you use, how your agents get production context, one rotating question). One rotating variant has an optional free-text paste box; that text is scanned and redacted for secrets, emails, hostnames and IPs before it is stored.
- **Passive**: a daily-salted hash of your IP address (never the IP itself), country, a coarse network type (cloud / residential / corporate), browser family, completion time and the order in which options were shown to you.
- **No email is asked in the survey.** An email is needed afterwards, on your claim page, to assign and keep a spot number.

## Agent survey

Your coding agent answers from what it already knows; our instructions tell it not to open files, run commands or ask you anything. The payload is enums plus optional pointers of up to 80 characters, which we scan and redact. We record, per request: timestamp, user-agent family and version (e.g. "Claude-User (claude-code/x)", "curl"), the derived harness profile, Accept header class, country, network type, the daily-salted IP hash and the option order. We do **not** record raw IPs, precise location, TLS fingerprints, full header dumps, or probe your model.

The exact list: `timestamp`, `ua_family_version`, `harness_profile`, `accept_header_class`, `content_type`, `mcp_client_name_version`, `mcp_protocol_version`, `mcp_capability_names`, `web_bot_auth_verified`, `signature_agent`, `network_category`, `country`, `ip_hash_daily_salted`, `options_order_shown`. Never: `raw_ip`, `precise_geo`, `tls_fingerprints`, `full_header_dump`, `sampling_based_model_probe`.

## Claim page

Your claim link is a bearer token: anyone with it can manage the claim, so keep it private. On the claim page you add an **email** to receive a spot number (verified by double opt-in; until verified we send nothing but the verification mail, and an unverified spot lapses after 7 days), invite up to **five teammates** by email (sent only after your own email is verified, each with an unsubscribe link naming who invited them, and at most one invitation per address ever), and submit **feature requests** (free text, redacted, stored as untrusted text and summarised only with tools-free models).

The email you add is stored on the claim row, which is linked to your survey answers. That is the only place answers and an identity meet; survey answers alone are anonymous.

## Retention

| Data | Kept |
|---|---|
| Survey answers | 24 months |
| Claim email | Until you remove it, unsubscribe, or ask us to delete it |
| Nonces, verification tokens, rate counters | 30 days |
| Raw user-agent samples (for calibrating client detection) | 14 days |
| IP hash salt | Derived per day; we only ever compare today's and yesterday's hashes |

## Deletion

Email sam@babbl-labs.com with your response id or claim link. Within 30 days we mark the response deleted, null its answers, remove the email and keep only the spot number as a gap.

## Analytics

Page views and API calls, including fetches by agents, are recorded server-side and sent to PostHog as pseudonymous events keyed by the daily-salted IP hash (no cookies, no person profiles, no session replay), with the fields listed above (path, user-agent family, country, network type, whether the page was fetched as markdown or HTML, referrer domain). Claim tokens and survey payloads are stripped from recorded URLs. The web pages may also load PostHog's script for humans in cookieless mode.

## Processors

We do not sell or share this data, and aggregate, anonymised results are all we publish; free-text quotes are never published without asking you first. The services that process it on our behalf:

- **Cloudflare** hosts the site and database (Workers, D1) and sees request metadata as any host does.
- **PostHog** receives the pseudonymous analytics events described above.
- **SendGrid** (Twilio) delivers verification, reminder, invite and launch emails to addresses you add. Replies go to sam@babbl-labs.com.
- **Calendly** is linked from the claim page for booking a call; opening it is your choice, and your claim link is not passed to it (claim pages send no referrer to other sites).
- **An LLM provider** may be used to summarise feature-request text in aggregate, with tools disabled; the text is redacted before storage.