Skip to content
Browse the docs
Trust and privacy

What leaves your machine

Updated August 5, 2026

This is the complete list of what Awaitful sends from your machine - not a summary, the list. The most specific thing Awaitful ever learns about a coding session is how long a sponsored line was on screen.

your machinestatus bar and panelpatched line inside Claude Codeterminal scriptlocal helper - 127.0.0.1
ad requestevent reportkill switch pollpatch health
Awaitful server

never crosses: your code, your prompts, your files, file names and paths

Everything inside Claude Code talks only to a local helper on your own machine; one wire crosses to Awaitful, and every field on it is pinned by the public CI egress test.

What leaves

  • A device token, so we know which machine earned
  • That an agent is thinking, and for how long
  • Which surface showed the line

In wire terms, the client makes a handful of request types and nothing else:

  • Ad requests - which surface is asking. That is the whole query.
  • Event reports - batched events proving a line was seen: a random event identifier (so the server can drop duplicates), the event type, which ad and slate, the surface, an advisory client timestamp, and the visible milliseconds, which the server caps - sent alongside the machine's random device identifier.
  • A kill switch poll - a yes/no safety check with no body at all.
  • Patch recipe checks (only if you enable a patch surface) - which agent and which Claude Code build, so the server can return the right known-good patch.
  • Patch health reports (only if you enable a patch surface) - hashes of Claude Code's own bundled files, so the fleet can agree a patch is safe. Never hashes of your files.
  • Account and earnings reads - read-only requests so the panel can show your account name and balance.
  • One-time link requests when you sign a machine in - a random handshake code, no content.

What never leaves

  • Your code
  • Your prompts
  • Your files or file names
  • Your agent's output

No file names, no paths, no project or repository names, no clipboard, no terminal contents. Thinking detection watches the agent's own spinner indicator, not what the agent is doing. Everything that runs inside Claude Code - the patched line, the terminal script - talks only to a local helper on your own machine at 127.0.0.1, never to the network directly. The terminal script even receives Claude Code's session data on its way through and deliberately never reads it; it only passes it on to your own previous status line.

That local conversation is short: which helper is this, what line should I draw, the line was drawn, seen or clicked, and - when the spot it attaches to is missing - I had a line and could not place it. That last one is how a broken surface tells you it is broken instead of quietly earning nothing. Each editor window and each copy of the in-editor script mint a random id when they start, so a window can tell its own script apart from another window's. Those ids live in memory for the session, never reach the network, and identify a window and a script, not you or your machine.

Identity, held to the minimum

A linked machine authenticates with a device token that identifies the machine, not your browsing - its narrow powers are described in Sign in and link your editor. Even the docs feedback control at the bottom of this page is anonymous by construction: it sends the page name, the vote, and your optional note. Nothing else.

Was this page helpful?