Privacy
Field by field, what leaves your machine and what never does.
The Pulse Code agent sends token counts, model names, tool names, timestamps, project paths and the byte length of tool results. It never sends your prompts, Claude's replies, your file contents, your tool arguments, or what your tools returned. It opens every transcript read-only and writes nothing inside your Claude Code directory.
Last updated 14 September 2026
What the agent sends
| Field | Example | Why |
|---|---|---|
| message id | msg_011Ce… | Deduplication. An opaque id, no content. |
| Token counts | input, output, cache write, cache read | The product. |
| Model name | claude-opus-5 | Pricing. |
| Timestamps | 2026-09-14T04:00:00Z | Ordering and date ranges. |
| Session id | 3768399b-… | Groups turns into a session. |
| Project path | /home/you/work/api | Per-project cost. Hashable — see below. |
| Tool name | Bash | Per-tool and per-MCP-server attribution. |
| Tool result size | 1092 | Estimating context cost. The length only. |
| Tool error flag | true | Error rates per server. |
| Hostname, OS, architecture | my-laptop, darwin, arm64 | Identifies the machine. |
| Agent and Claude Code version | 0.1.0, 2.1.266 | Support. |
| Job name | nightly-audit | Per-job cost. Only if you use cc-run. |
What the agent never sends
- Your prompts
- Claude's replies
- Any thinking content
- Your file contents
- Tool arguments — the command you ran, the file you opened, the query you sent
- Tool result bodies — only the byte length is measured
- Environment variables, API keys, or anything else from your shell
The agent never writes to your Claude Code directory
Every transcript is opened read-only. The agent creates, modifies and deletes nothing under ~/.claude/, ever. Its own state lives in a separate directory, ~/.pulsecode/.
This was measured rather than asserted: a full agent run across 29,558 files under ~/.claude/ changed not one byte of size or modification time.
If even paths are sensitive
Run the agent with --redact-paths and project paths are hashed before upload. You still get per-project totals; we never see the names.
Your account data
- We store your email address to sign you in and to send digests you asked for.
- Passwords are hashed with Argon2id. We cannot read them.
- API keys are stored hashed. The full key is shown once and is not recoverable.
- Card details never reach this site. Payments go through Stripe.
- Deleting your account really deletes it, after a seven-day grace period.
Retention
Session detail is kept for as long as your plan says: seven days on the free tier, a year on Pro, two years on Team. Daily totals are kept longer so your trend survives, and they contain no session-level detail.
Contact
Questions about any of this: support@claudepulse.cloud.