Privacy.

This website

chickpea.co is a static site with no forms, sign-ups, or accounts. It loads its fonts and images from its own origin and embeds no third-party widget. The GitHub star count shown on the home page is fetched once when the site is built, not by your browser. When you follow a link to GitHub, Cloudflare, X, or the documentation site, that site's privacy policy applies from there.

The one thing the site measures is traffic, with Google Analytics 4 (measurement ID G-LMKR9HK8JH). Every page loads Google's gtag.js, which sends Google the page you viewed, the page that referred you, your browser and device type, and your IP address, from which Google derives an approximate location, and sets the _ga and _ga_* cookies in your browser for up to two years so that repeat visits count as one visitor. Paperplane Labs uses this to see which pages are read and where visitors come from; it is not joined to any account, because there are none, and it is handled under Google's privacy policy. Browser tracking protection, a content blocker, or Google's opt-out add-on stops it, and the markdown version of every page (add .md to the path) carries no script at all.

The site is served by Cloudflare Workers. Like any web host, Cloudflare receives the request your browser makes, including your IP address and user agent, in order to answer it, and handles it under Cloudflare's privacy policy. The project keeps no visitor logs of its own and does not receive them.

The Chickpea software

Chickpea is self-hosted. When a team deploys it, the runtime, model traffic, configuration, memory, connector credentials, and Slack messages stay in the Cloudflare account or Node host that team operates. The project has no access to a deployment and no server that a deployment reports to for its work. The security model describes what a teammate can see and do: it only reads channels it is published to, unmentioned messages never reach a model, and credentials never reach the model at all.

There are three documented exceptions, each optional or switchable:

• Product telemetry: a small set of anonymous events, such as "a workspace connected" or "an Agent was created", keyed by a random installation ID with no workspace, user, message, or provider identity. It is on by default, the complete event catalog is public, and one setting turns it off.
• Managed connectors: opting a teammate into managed connectors hands OAuth for those accounts to Composio, a third party. The default, connecting your own accounts and HTTP APIs, does not.
• The shared Slack-app gateway: the optional lane that lets a team skip creating a Slack app stores encrypted installation credentials and sanitized health metadata, and does not durably store Slack message or event bodies. The exact boundaries are in Shared Slack gateway data handling; a team that prefers no gateway in the path uses its own Slack app.

Questions

Questions about this page go to GitHub Discussions; anything that looks like a vulnerability goes through the private security form. This page was last checked against the source on 2026-09-04 and changes when the site or the software does.