Keeping your account and keys safe
Compromised accounts, leaked keys and good security habits.
- Am I responsible for what happens on my account?Yes. You're responsible for activity under your account and API keys, unless caused by Clatter Labs breaking the Terms.Policy
- Are cla.wtf links really from Clatter Labs?Yes. cla.wtf is Clatter Labs' official short-link domain, managed by Clatter Labs and protected against tampering.FAQ
- How do I keep Line CLI and my keys safe on my own computer?Lock your device, keep Line updated, store keys outside code, and sign out with line logout on shared machines.FAQ
- How do I report a phishing message pretending to be Clatter Labs?Don't click or reply. Forward details to support@clatterlabs.com, and change your password if you entered it anywhere.How-to
- How do I spot a fake Clatter Labs email?Account emails are only sign-in codes, magic links, password reset links and new-device alerts. Anything else asking for codes is suspicious.FAQ
- I got a notice that a token or key was exposed. What does it mean?We detected that a token may have leaked and revoked or disabled it where we could. Create a new one and check for misuse.FAQ
- Is it allowed to jailbreak or get around safety filters?No. Circumventing safety systems, filters, quotas, metering or authentication, including jailbreaks for prohibited content, breaks the Terms.Policy
- My Clatter Labs account was hacked. What do I do?Secure your email, sign in with a code, change your password, revoke sessions, apps and keys, turn on 2FA and tell support.How-to
- Security checklist for your Clatter Labs accountTen quick steps: strong sign-in, 2FA, device review, app review, scoped keys, no keys in front-end code, and more.Reference
- What does Clatter Labs do if it thinks my account is compromised?We may revoke credentials or sessions and temporarily suspend the account to protect it, and tell you where practicable.FAQ
- Who is responsible when an AI agent does something I approved?You are. Read what Line CLI or Cosmos Agent asks to do before approving; you're responsible for actions you approve or let run unattended.Policy
- Will Clatter Labs ever ask for my password or sign-in code?No. Staff never need your password, sign-in code, two-factor code or full API key. Never share them.FAQ
- Will Clatter Labs tell me if there's a data breach?Yes, if a breach is likely to put your rights at high risk. Authorities are notified within 72 hours where required and feasible.FAQ
Still need help?
Tried the steps above and still stuck? Email us. We usually reply within the first hour, and always within 24 hours. A full support team is with you.
Infrastructure questions, or permanent deletion of your data
infrastructure@clatterlabs.xyzFor deleting your whole account or the data of one service.