Legal
Privacy at Murmell
Murmell stores your account, your canvases, the links you have shared and, if you connect a code host, an encrypted access token. It does not store your model API keys: those stay in your browser and travel only into the agent process you start. There is no analytics script on this site and no third-party tracker anywhere in the product.
What is stored
- Your account: an email address, a password hash if you set a password, and the identity of the provider you signed in with if you used one.
- Your canvases: their names, what is on them, the arrangement of the windows, and the two share tokens each one carries.
- A code host token, if you connect one. It is encrypted with AES-256-GCM before it is written, under a key that lives in the environment of the server and never in the database, so a database dump on its own yields nothing usable.
- The transcript of a session while the canvas is alive, so that closing a tab and coming back shows you what arrived while you were away.
What is never stored
Your model API keys. Murmell is bring-your-own-key: the key you paste stays in your browser, travels in the frame that starts an agent, and is placed in that agent process environment. There is no copy in the database, none in the server image, and none in a log line. This is the reason Murmell can say it resells no tokens: it never holds the credential that would let it.
Your password in readable form. It is hashed with Argon2 when you set it, and the hash is what is compared when you sign in.
Where each secret lives
Murmell runs in two halves and the split is a privacy property rather than a deployment detail. One half holds the accounts, the canvases, the tokens and the encryption key, and it never executes agent code. The other half runs the agents, and it holds no database, no decryption key and no stored credential. An agent that gets out of what it was asked to do finds a project directory and nothing worth taking.
Who else is involved
- The agent you bring. Claude Code, Codex and the rest talk to their own vendor with your own account, exactly as they would on your laptop. What you send an agent is covered by that vendor terms.
- Email. Password resets, security notices and account deletion confirmations are sent through a delivery provider, which receives your email address and the message.
- Dictation, if you use it. The audio goes to a transcription service under a short-lived grant the server mints. The page that records you never holds the key that pays for it, and the grant expires on its own.
- Your code host, if you connect one. Murmell pushes your project to a repository you own, authenticating with the token you connected.
Your side of it
Ask for a copy of what is stored about you, or for the account to be deleted, from your account settings or by writing to hello@murmell.com. Deletion removes the account, its canvases and its stored credentials. A deletion request is confirmed by a one-time link sent to your address, because an action that cannot be undone should not be startable by somebody who is merely signed in on your machine.
A read link you have handed out shows your canvas to anybody holding it. Sharing is what the link is for, and it is the one place where what happens next is yours to control.
Straight answers
Does Murmell store my Anthropic or OpenAI API key?
No. The key stays in your browser and is sent only in the frame that starts an agent, where it goes into that process environment and nowhere else. It is not in the database, not in the container image and not in a log.
Can Murmell read my code?
The machine running your agents holds your project directory, because that is what the agents work on. It is operated by Murmell, so treat it as you would any cloud build machine. Nobody at Murmell reads a project directory as a matter of course, and there is no product feature that copies one anywhere.
Do you use analytics or advertising trackers?
No. There is no analytics script, no tag manager and no advertising pixel on murmell.com or in the product. The server logs a request the way any web server does, and nothing follows you between sites.
How do I delete my account?
Ask from your account settings and the account, its canvases and its stored credentials are deleted. The request is confirmed by a one-time link sent to your email address, so nobody else can start it for you.