Privacy

Privacy policy

Last updated: November 13, 2026

stew is built to keep your requests on your own devices. This page says what each part of stew does with data: this website, the Mac tool, the iPhone app and the relay that connects the two.

Who is responsible

Koode, Amsterdam, the Netherlands, is the controller for the data described here. Write to contact@koode.nl with any question about it. The imprint has the company details.

This website

  • stewcli.com is hosted on Cloudflare. Cloudflare receives your IP address to deliver the page.
  • The site sets no cookies and has no analytics or tracking. Request logging for the site is off.
  • If you pick Light or Dark in the theme switch, your browser stores that choice on your device. System, the default, stores nothing.
  • Every file of the site, fonts included, comes from stewcli.com itself; no other server is contacted.

The Mac tool

  • The Mac tool collects nothing and sends nothing to Koode. Requests, answers, approvals, history and logs stay in files on your Mac.
  • The risk check runs on your Mac through your own claude command line tool, signed in to your own Claude account. For a direct stew permit it sends the request (the action, the reason and the command) and your recent messages in that session to Anthropic, under your account and Anthropic's terms. You can turn the risk check off in stew settings.
  • Updates are downloaded from releases.stewcli.com, hosted on Cloudflare. stew checks there for a new version one minute after it starts and then once a day, and downloads the new version when there is one. These requests name only the stew version. Cloudflare receives your IP address to deliver them. You can turn automatic updates off in stew settings.

The iPhone app

  • The app has no account and no analytics.
  • You pair it with your Mac by scanning a code. The keys for that pairing stay in the keychain of the Mac and of the phone.
  • Requests reach the phone through the relay (below), and Apple delivers the notifications. What Apple delivers holds a fixed text, "A request is waiting on your Mac.", and the encrypted request, which only your phone can decrypt.

The relay

The relay at relay.stewcli.com passes messages between your Mac and your phone. It is hosted on Cloudflare, which also stores the relay's data. Messages are encrypted end to end: the relay cannot read your requests or your answers. It stores only what it needs to deliver them:

  • For each pairing: the pairing id, the public keys of both devices, and the address Apple gave the phone for notifications (with whether the app is a test or a store build). These stay until you unpair.
  • Until the phone registers, a hash of a one-time registration token. It is deleted once the phone registers. A pairing that no phone completes within an hour is deleted.
  • For each message: its type, which device sent it, the request, message and reply ids, its expiry time, its signature and the encrypted content. A request is kept until it is answered or expires, at most 7 days. An answered request's outcome is kept for one hour, so a phone that missed it can still learn it. A message for a Mac that is offline is kept until the Mac receives it or the message expires.
  • Message ids until they expire, the signatures of recent calls for 5 minutes, and counters for the rate limit, so a message cannot be replayed and the relay cannot be flooded.

Unpairing on either device removes the pairing from both devices and deletes it on the relay. Unpairing on the Mac deletes everything at once. Unpairing on the phone deletes the phone's keys, its notification address and its requests at once, and the rest as soon as the Mac has been told. When Apple reports that a notification address is no longer valid, the relay deletes it.

The relay limits how many requests one IP address can make. Cloudflare receives your IP address and counts these requests; the relay does not store IP addresses. Request logging for the relay is off. The relay's own error lines hold no tokens, keys or message contents.

Who processes data for Koode

  • Cloudflare: hosting of this website, the release server and the relay, including the relay's storage.
  • Apple: delivery of notifications to the iPhone app.

Legal basis and your rights

Koode processes this data to provide the service you use (the relay and the notifications), and on the basis of its legitimate interest in keeping the website, the updates and the relay running and safe from abuse.

You can ask which data Koode holds about you, and ask for it to be corrected or deleted. You can delete a pairing's data on the relay yourself by unpairing. For anything else, write to contact@koode.nl.

You can complain to the Dutch data protection authority, Autoriteit Persoonsgegevens.