Shawarma

Privacy

Last updated 18 October 2026

This page says what Shawarma REPL keeps about you, why, who else sees it, and for how long. Shawarma is run by phi holdings; use the contact form about anything here.

What we store

  • Your Google account basics: Google’s id for your account, your email address, your name and the address of your profile picture. We use them to sign you in and show whose account it is. Signing in with Google is the only way in; we never see your Google password.
  • Sign-in sessions: for each device you sign in on, when it started and was last used, its IP address and its browser’s user agent, so sessions can be checked and ended (Sign out everywhere).
  • Your songs: each project’s code and saved versions, the chat with the assistant (what you asked, its replies and the changes it suggested), the sounds you upload and the audio you export.
  • What you did with suggested changes: whether you accepted, partly accepted, rejected or reverted each one, and the reason if you gave one. The assistant uses your closest past decisions, from any of your songs, when you ask for something similar. You can turn this off or delete it in Settings.
  • Before you have an account: if you ask to be told when Shawarma opens, we keep that email address (and when you gave it) to send that one email. If you send a question, suggestion or problem from the site, we keep what you wrote and, if you add it, your email address so we can answer. Ask through the contact form to have either removed.
  • Usage and plan: how much of your AI allowance each reply used (including replies you stopped and ones that failed part-way), which plan you are on and when it renews (from Polar), and which version of these pages you last saw.
  • Account events: the steps of getting started (signed up, first project, trial started, subscribed, cancelled), when a chat was refused because a limit was reached, and which account emails we sent you and when, so each is sent only once.
  • Operator actions: if we suspend an account or give it Pro, the reason and a record of the action. That record names your account only by its id and is kept after the account is deleted, without your email address.
  • Short-lived records: request counts that stop abuse (deleted after a day), and our servers’ logs. The web server logs your IP address, the page requested and your browser; the app’s own logs name your account only as a one-way hash and never contain your email, song code or chat. Logs are rotated and kept for a few weeks at most.

Who else processes it

  • Hetzner (Germany) hosts the servers, the database and your files, and stores our encrypted backups.
  • Google confirms who you are when you sign in.
  • Anthropic (USA) runs the AI model. When you ask the assistant something, your message, your song’s code and the recent chat are sent to Anthropic’s API to write the reply. Under Anthropic’s commercial terms that data is not used to train their models.
  • Polar is the merchant of record for Pro: it takes your card and billing details, charges you and handles tax. We only learn your plan, its status and when it renews.
  • Resend delivers the emails we send you about your account and billing (welcome, your trial and allowance, a failed payment, a cancellation); it gets your email address and the message.
  • Sentry (error tracking), when we have it switched on, receives a technical report when something breaks: what failed, the page (without its query string), your browser, and your account as a one-way hash. Reports carry no request contents, cookies, song code or chat, and email addresses are removed from them.

Searching for examples inside the app runs on our own servers. Projects are private to your account; nobody else sees your songs. We do not sell your data, share it with advertisers, or use it for anything other than running Shawarma.

Your browser

The app, its fonts and its built-in sounds come from our own server. The only other places your browser contacts are Google (for sign-in, and to show your profile picture from googleusercontent.com), Polar (when you open checkout or Manage billing) and, when error tracking is on, Sentry (only when something breaks).

We use one cookie to keep you signed in (shawarma_session, up to 30 days) and a short-lived one during Google sign-in. No advertising cookies, no cross-site trackers, no analytics. The app also keeps a few things in your browser’s own storage, such as unsaved edits and the panel layout; they never leave your device.

How long we keep it

  • Everything above stays while your account exists.
  • A project you delete goes to the trash; you can restore it for 30 days, then it and its files are removed for good. Delete forever removes it at once.
  • When you delete your account, your account, projects, chats, usage and files are deleted at once. Copies in our encrypted backups are removed as the backups age out, within 12 months.
  • Billing records stay with Polar as tax law requires.

Your choices

In the app, under Account, you can download a copy of all your data (Export my data), end every session (Sign out everywhere), and delete your account. Under Settings you can stop the assistant learning from the changes you accept and reject, and delete what it has learned. You can also send a request through the contact form for anything else: a correction, a question, or if you can no longer sign in (give the email address you sign in with).

Changes

If this page changes in a way that matters, we will tell you in the app before the change takes effect.