ServerHat privacy policy.

ServerHat starts and stops the local web servers you work on. Everything it knows about them stays on your PC. ServerHat has no account, no cloud sync, no analytics and no GuruHat server.

Effective date: November 4, 2026

What ServerHat stores

• Your servers: each one's name, folder, command, arguments, port, URL and environment variables, in %APPDATA%\ServerHat\servers.json
• Server output: what your servers print, in %LOCALAPPDATA%\ServerHat\Logs
• The local API's token and address, in %APPDATA%\ServerHat\api-token and api.json. The token file is readable only by your Windows account.
• Preferences, such as the commands you've allowed, in the registry under HKEY_CURRENT_USER\Software\GuruHat\ServerHat

The Microsoft Store version uses these same locations, so your scripts and AI tools find them where the documentation says they are. Environment variables can hold secrets such as API keys; they're stored as plain text, protected only by your Windows account, like any other file in your user folder.

Network connections

• The local API listens only on 127.0.0.1, so other computers can't reach it, and every request needs the token. It's how Claude Code, Codex and your scripts manage your servers.
• Update check: the version from guruhat.com and GitHub asks GitHub once a day whether a newer release exists. GitHub sees your IP address and ServerHat's version number, under GitHub's privacy statement. The Microsoft Store version doesn't check; the Store updates it.
• Your servers are your own programs. Whatever they connect to is up to them, not ServerHat.

ServerHat sends nothing to GuruHat.

AI tools

When you connect Claude Code, Codex or another tool through ServerHat's MCP server or API, that tool can read your server list and logs and add, change, start and stop servers. What it does with that information is covered by that tool's own privacy policy. ServerHat won't run a command an AI tool or script added or changed until you click Allow.

Deleting your data

Remove a server from ServerHat's menu to delete it and its settings. To remove everything, uninstall ServerHat, then delete the %APPDATA%\ServerHat and %LOCALAPPDATA%\ServerHat folders.

What ServerHat does not do

• No accounts or sign-up
• No cloud sync
• No analytics, telemetry, crash reporting or advertising
• No selling or sharing of personal data

Children

ServerHat is a developer tool, not directed at children under 13, and it does not knowingly collect any information from them.

Open source

ServerHat is free and open source under the MIT license, so you can check exactly what it does on GitHub.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

Questions about this policy: hello@guruhat.com. See also the GuruHat website privacy policy and the ServerHat page.