Privacy note

Draft of 23 October 2026

Commonplace keeps what your AI agents learn about you in one home that you own. This note says what we store, where it lives, who can read it, and how you take it with you or delete it. It is written to be read in full.

Who runs it

Commonplace is a Pilgrim Technologies product, run during the beta by Devin Halladay. Write to privacy@commonplace.computer about anything on this page.

What we store

• Your home. The files, memories, places and skills you and your agents save, and the history of every change, each signed with who made it (you, or the agent that wrote it).
• Your account. Your email address, and the sign-in sessions that Clerk keeps for us.
• Your keys. Each agent you connect gets its own key. We keep only a fingerprint (a hash) of it, so we can't read it back or show it again.
• Logs, without content. One line per request: which agent, which tool or page, whether it worked, and when. A separate log records each time a place you marked sensitive is opened. No log holds what you saved, what you searched for, a file name inside a sensitive place, or a key.
• A daily count. Once a day your home works out a short report of numbers only: how many agents wrote, how many read, how many lines one agent saved and another read, how many web visits and agent calls there were, and how many files were written. It holds no names, paths or content. We use it to see whether Commonplace is working for people.
• The waitlist. If you joined it: your email. The list is kept by Clerk, which also sends the mail that says you're on it.
• Product analytics (draft). A short list of events with no content, counted under a pseudonymous id per home, through PostHog. No session recording and no automatic capture.

Where it lives

Your home runs on its own small server with its own disk, at Fly.io in Ashburn, Virginia, in the United States. Nothing is shared between homes: each has its own server, disk, private network and keys, and has no address on the public internet. Your agents and your browser reach it through our front door, which passes each request to the right home and keeps none of it.

Encrypted copies of your home (backups) are kept at Tigris. The web app's pages, and this site, are served by Vercel; Vercel sees which page was asked for and from which address, and never sees your home's contents or your agents' traffic. Sign-in and the waitlist are run by Clerk; our own email is sent by Resend; product analytics go to PostHog. The subprocessor list names each of them with what they get.

Who can read your home

Your agents read what their keys allow, and the apps behind them (Claude, ChatGPT and others) handle what they read under their own privacy policies.

We can. Your home is not end-to-end encrypted: search, the start context your agents get and the sensitive-place rules all need the plain text, so the person who runs Commonplace can technically open any home. We don't, unless you ask us to, there is a security problem with your home, or the law requires it, and we tell you when we have.

When we open a console on your home or run a command in it through our own tools, a line naming the reason is written to your home before the session opens, and it shows in your feed. That is enforced by our tooling, not by cryptography: a direct console through our hosting provider, a disk snapshot, or a backup decrypted on our own computer can bypass it. We say this plainly so you can decide what to keep in your home.

Sensitive places you mark are hidden from your agents' start context and search, and each opening is logged. They are protected from your agents, not from us.

What we don't do

• We don't sell your data, show you ads, or share your home with anyone except the subprocessors listed.
• We don't train any AI model on your home and don't analyse its contents.
• Commonplace itself sends nothing in your home to any AI model. The apps you connect read what their own policies allow. The one exception is if you add your own provider key: then your home's Settings says exactly what is sent and to whom.

On your own computer

• If you connect Claude Code or Codex, Commonplace keeps a copy of the last start context it gave that agent in ~/.config/commonplace/, readable only by you, so a session can start while your home is waking. Uninstalling removes it.
• The web app keeps the last view you saw in your browser, so pages open at once. It never keeps the text of a sensitive place or the contents of a file, and it is cleared when you sign out.

Cookies and tracking

This site sets no cookies and runs no analytics. Signing in to the web app uses Clerk's cookies, which are needed to keep you signed in. Since there is no tracking to turn off, we treat every visitor as if Do Not Track were on.

The private address

Some apps connect with a private address that carries the app's key. Treat it like a password. Requests pass through Fly.io's network on their way to your home, and we have not yet confirmed whether Fly.io keeps the address in its own logs, so you can make a new key on the Agents page at any time and the old address stops working.

Taking it with you, and deleting it

• Export. From Settings, download your whole home with its full history, any time.
• Undo. Any change in your history can be reverted.
• Delete. From Settings. Your home closes at once and every key stops working. You can cancel until it is erased, which happens within 24 hours in normal operation and never later than 7 days. That removes the server, its disk, its snapshots and your account. Encrypted backups expire within 30 days. We keep a fingerprint of your email address for 30 days so an invitation can't be reused, then delete it. You get an email when it is done.
• The waitlist. Write to us and we take your address off the list.

If something goes wrong

If we confirm a security incident that affects your home, we tell you within 72 hours, with what happened and what was exposed.

Age

Commonplace is for people aged 18 and over.

Changes

We'll email you before any change to this note that affects what we store or who can read it.