Privacy Policy.

The short version: HQ runs on your PC and the developer collects nothing from it. What leaves your computer goes to the services you sign in to or turn on yourself, listed below.

Last updated 2026-10-26

(1) HQ runs locally

HQ is a program on your Windows PC. It keeps its settings in its data folder inside %LOCALAPPDATA%\Programs\HQ and your work in the projects folder you choose. Your sign-ins stay with the official tools that made them (Claude Code and Codex), in your user folder.

(2) What the developer collects

Nothing. HQ has no analytics, telemetry, crash reporting or account with us, and it sends nothing to any server run by the developer. We checked the shipped code for every outbound address before writing this page; the full list is in section 3.

(3) What leaves your PC, and to whom

  • Anthropic, when you use a Claude account: Claude Code sends your prompts, files it reads and its results to Anthropic, under Anthropic's own terms and privacy policy. HQ itself also asks Anthropic for your account's usage and plan (api.anthropic.com), with your own sign-in, every 2 minutes and after each turn.
  • OpenAI, when you use a ChatGPT account: Codex sends your prompts, files and results to OpenAI, under OpenAI's terms. Image generation goes to OpenAI the same way.
  • npm and winget, when HQ installs Claude Code, Codex, Node.js or cloudflared for you: the usual download requests to those package registries.
  • jsDelivr: HQ's window loads a small QR-code library from cdn.jsdelivr.net when it shows the phone pairing code.
  • Roblox Studio, for game projects: agents talk to Studio on your own PC. What Studio sends to Roblox is under Roblox's terms.

Each of those services has its own privacy policy, and the developer of HQ has no access to what you send them.

(4) Phone remote (off by default)

If you turn on Phone access, HQ serves its controls to your phone over your home Wi-Fi, behind a PIN. If you choose access from anywhere, the traffic runs through a Cloudflare quick tunnel (a trycloudflare.com address), and HQ checks the connection with cloudflare.com. If you set up new-address alerts, HQ posts the new address to your private topic on ntfy.sh so your phone gets a push. Cloudflare and ntfy.sh handle that traffic under their own policies.

(5) Integrations you set up yourself

Some features only run when you give HQ your own keys or settings, for example a Hostinger API key for domains, or your own project's database and website. HQ then talks directly to those services with your credentials. Nothing passes through the developer.

(6) This website

This site is hosted on Vercel. Like any web host, Vercel keeps standard request logs (such as IP address, browser, page and time) for operating and securing the service; see Vercel's privacy policy. The site has no analytics, no tracking, no ads and no cookies. Fonts and scripts are served from this site, not from third parties. The download is a plain file; we don't count or log downloads beyond Vercel's own logs.

(7) Deleting your data

Everything HQ stores is on your PC. Delete %LOCALAPPDATA%\Programs\HQ to remove HQ and its settings, and your projects folder to remove your work. To delete data held by Anthropic, OpenAI or another provider, use that provider's account settings.

(8) Children

HQ is for people 18 and older and isn't directed at children.

(9) Changes

If a future version of HQ or this site handles data differently, this page will change first and the date at the top will move.

(10) Contact

Privacy questions: HQ on X.