Updated September 22, 2026. This notice covers browsing GuthLabs and the AgentEmail landing page. The storage details below also describe the Guth sign-in and workspace features. Guth Labs LLC operates this site. Contact us at legal@getguth.com with privacy questions or requests.
When you browse
Cloudflare hosts and protects this website. It processes network information such as IP addresses, requested pages, request times, browser information, and security signals to deliver pages, prevent abuse, and provide traffic reports. We use those reports to understand site traffic, including crawler requests. This processing supports our legitimate interests in running and securing the website.
This website does not load advertising pixels, session recording, or optional browser analytics scripts. Illustrative public examples use sample information. Signed-in chat is different: messages you send are processed by the selected model service to produce replies.
Cookies and browser storage
Local storage is information saved by this website in your browser. Public pages now use one fixed appearance. Privacy choices can clear appearance preferences saved by earlier versions. Both choices let you use the whole public website. Sign-in and features you use, such as composing a chat message, have their own functional storage described below.
| Item | Purpose | Duration |
|---|---|---|
| guth-site-privacy-v2 | Remembers your privacy choice; no visitor identifier. | Choice expires after 180 days. You can clear it sooner. |
| guth.appearance (local storage) and guth_appearance (cookie, Secure, SameSite=Lax) | Legacy appearance preferences from earlier versions. Public pages now use one fixed appearance. Choosing Essential only clears these appearance records. | A legacy cookie can last up to 1 year or until cleared. Local-storage records can remain until overwritten or cleared. |
| __Host-guth_session | Essential Guth sign-in cookie; Secure, HttpOnly and SameSite=Lax for Google sign-in returns. Its opaque value connects to a revocable server-side session. | New Guth sessions last up to 30 days; existing sessions retain their previously issued expiry. Revocation or sign-out can end the session. |
| Chat drafts and workspace preferences | Signed-in chat saves unsent draft text in local storage, scoped by user and workspace. Chat Details and Notebook inspector preferences are stored locally; guth_chat_details is a layout cookie. These are not analytics identifiers. | Drafts are removed when successfully sent; other local records remain until replaced or cleared in browser settings. The layout cookie lasts up to one year. |
| Chat session state | Session storage remembers the open conversation, scroll position and pending reply reference so you can resume the interface. | Until the browser session ends or the feature clears the record. |
| Cloudflare security cookies | Cloudflare may use cookies when a security challenge or other protection requires them. | Depends on the protection used; see Cloudflare’s cookie information. |
We do not use these choices as permission for advertising or analytics tracking. You can reopen here or in the public website footer. Choosing Essential only clears the saved appearance preferences described above. You can also clear site storage through your browser. Previously saved records may remain in browser storage until overwritten or cleared, but an expired choice is not used.
AgentEmail landing page
The public agentemail.cc landing page does not set application cookies or save browser preferences. Cloudflare delivers and protects it and provides aggregate request reporting. Opening Guth Mail takes you to guthlabs.ai, where Guth sign-in and workspace storage apply. Reading or sending mailbox content is a separate authenticated service.
When you contact us
The contact page prepares an email in your own email app or lets you copy the inquiry. Nothing is sent by the website. You choose whether to send the email from your own app. We use correspondence we receive to answer your request. Please do not include passwords or sensitive personal information in an initial inquiry.
We retain correspondence while needed to respond, manage agreed work and meet applicable record-keeping obligations. You can ask us to delete an inquiry that is no longer needed; legal obligations or an ongoing dispute may require retention.
Providers and international processing
Cloudflare and our email provider may process information in countries other than yours under their applicable service terms and data-protection arrangements. Read Cloudflare’s privacy policy and Google’s privacy policy for their practices. Following an external link takes you to a site with its own privacy terms.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of your personal information, or to receive a copy. You may also complain to your local data-protection authority. Email legal@getguth.com to make a request. We may need to confirm your identity before acting on it.
Account sign-in
The public field guides, instruments, and website remain available without an account. Guth account holders can sign in to the account page. You can create an account with an email address and password, confirm your email, and complete your profile. Creating an account does not grant access to another person’s organization, agents, or private data. Payments are not enabled on this website. Existing account holders can use Notebook to save notes and upload files.
When you sign in, Guth’s Cloudflare account service verifies your credentials. Your browser receives an essential, secure, HTTP-only session cookie. Server-side session checks protect account-scoped requests.
Your current Guth account and website session are managed by Guth’s Cloudflare services. Session duration and renewal depend on the session in use. Signing out ends that website session without deleting your Guth account.
We limit authentication and confirmation-email requests to prevent abuse. Confirmation and recovery messages are sent through Guth’s configured email delivery service. Account access does not enable optional advertising or analytics tracking. Apps and connected services have their own data uses and notices.
Notebook cloud library
Notebook uses Guth’s Cloudflare account services to read and save your account’s notes, folder memberships, file metadata, version records and linked agent notebooks. Uploaded file contents are held in Cloudflare storage behind authenticated, account-scoped file operations. The website verifies your account and access to the requested note or file before carrying out protected operations.
Unsaved edits and selected upload bytes remain in this page’s memory while it is open. They are not stored as a browser draft, and closing or reloading the page can lose unsaved work. Successful saves remain in your cloud library and its version history after sign-out. Linking a note or file to an agent records its destination; it does not prove that the agent has read or processed it. The web preview does not yet provide account-wide export or deletion controls; contact us for help with those requests.
Private reference catalogues can contain resource descriptions, filing categories and source locators. They are visible only through the associated account. A catalogue entry is a reference, not a copy of its source file. Imported app workspace archives are stored as original private files, including any drafts, version history and embedded content in the archive. The web reader does not activate links, run embedded code or automatically sync separate device files.
Agent API authorization
An existing account holder can approve a registered software client to read our public guide catalog through OAuth. This permission does not grant access to private notebooks, messages, or account records. We store client names, redirect addresses, owner identifiers, grants, and token records in a dedicated Cloudflare KV namespace to operate this authorization. Client registration expires after 24 hours; access tokens expire after 15 minutes and cannot be refreshed. Grant metadata may remain until revoked or removed. We use the connecting IP address to limit registration and token requests.
Clients can revoke tokens using the endpoint documented in our authorization instructions. Revocation may take time to propagate between locations. Signing out ends your browser session and does not revoke previously issued API tokens. Public browser tools send requests without account cookies and display the result on the page.
Owner-claimed agent access
An agent may request a temporary registration using an account email address. This does not create a human account or reveal whether that email is registered. We keep the email hint and hashes of the claim handles and confirmation code in a Cloudflare Durable Object for up to ten minutes. The existing account holder must sign in with the matching confirmed email and type the code to claim the request. We do not send a confirmation email for this flow.
On claim, we remove the email hint and code hash and retain the owner user ID, registration state, expiry, and token acceptance hashes for at most one hour. Expiry cleanup removes these identifying and credential-verification fields; infrastructure backups may follow provider retention policies. Provider client and grant records also use the OAuth storage described above. Access tokens last at most fifteen minutes, and the service assertion can obtain replacement tokens only within the original one-hour registration lifetime.
The owner can revoke the whole registration from its management URL. Agents can revoke individual tokens. Each registration token is checked against its live registration state before accessing the public guide API, so a revoked registration cannot continue through a stale provider token record. These permissions do not create a notebook, mailbox, or access to private data.