This website
- No ads, no analytics and no tracking scripts.
- Cookies are set only on /beta, the society page, and none of them names you: one when you open an invite link, which keeps that page open to you for 30 days; one when you prove your invite with its code, so the download knows it's you, for 30 days; and one when you join the waitlist, so the page shows your waiting node, for a year. No other page sets one.
- Your light or dark choice is saved in your own browser, and never sent to us.
- The site is hosted on Vercel, which keeps standard server logs.
If you join the society
- Join the society opens shaba.sh/beta. If you leave your email there, it goes on our waitlist, in our database on Supabase, with the time you joined. We use it only to tell you when you're in. We don't sell it or share it. To have it deleted, email hello@shabash.dev.
- If you open an invite link and type your email, we check it against your invite, and Supabase emails that address a sign-in code. Entering that code creates your Shabash account. Nobody else who opens the page sees your email.
- If you booked a call with us on Cal.com before November 2026, the name and email you gave went to Cal.com (see their privacy policy), and we used them only to talk to you about a pilot.
- If you signed up with your email on this site before October 2026, we still have that email and the page you signed up on, in the same waitlist. To have it deleted, email hello@shabash.dev.
The Mac app
What the app reads, what leaves your Mac and where it goes, including the services that send its sign-in emails and run its AI, is on the security page.
Free plugins for Claude Code and Codex
- The Shabash plugins for Claude Code and Codex run on your computer and send nothing to us. We get no data from them, and they have no analytics.
- When you use one, its script reads your prompt history (
~/.claude/history.jsonl, or~/.codex/history.jsonlin Codex) and the titles of the sessions it lists, and runs read-only git commands, likegit logandgit status, in those sessions' folders. Exporting a session reads that whole session. It prints what it found into your Claude Code or Codex session, which sends it to Anthropic or OpenAI like anything else you do there. The plugin's README lists exactly what that includes. - The skill scanner reads the skills, commands, agents and plugin files Claude Code or Codex will load, and only the hooks and MCP servers in your settings files and
~/.claude.json. It blanks out anything that looks like a key before printing a line. - The plugins change one thing on your computer, and only when you say yes:
keepsets how long Claude Code keeps transcripts in~/.claude/settings.json, after saving a copy of the file. - You install them from GitHub, under GitHub's own privacy terms.
- Claude is asked to end each answer with a link to shaba.sh that has the plugin's name in it. If you follow the link, that name shows up only in the server logs of Vercel, which hosts this site.
Crash and problem reports from the app
- Crash reports are sent only after you say yes in the app. Each says what kind of error it was and where in Shabash's own code it happened, never paths from your Mac, prompts or project names. They aren't saved with your account.
- Report a problem sends what you type and any crash reports you attach, with your email so we can reply.
- Each report is kept on Shabash's server for 30 days, then deleted. A summary of each kind of crash, with no install ID or account, stays until 30 days after it last happens.
Paying for Shabash
Stripe takes the payment on its own page and keeps your card. We never see the card number. We keep which plan you're on, when it renews, and for a team plan, the emails you give seats to.