Privacy policy

Effective 23 October 2026. Applies to Claudit, the Claude Code plugin published by mchiver at github.com/mchiver/claudit, and to this documentation site.

Claudit records what happens in your Claude Code sessions and keeps the record on your own computer. It has no server of ours, no account, no telemetry and no analytics. We never receive your data, because nothing in Claudit sends it to us or to anyone else.

What Claudit records

While a session runs with Claudit on, the plugin records events about that session:

Session marks: when a session starts and ends, its id, and the working folder it ran in.
Turns: the text of each message you send, when it started, when it ended and how.
Tool calls: the tool's name, a one-line summary of what it did, when it started and finished, and whether it was done, denied or failed.
Messages: the rows the conversation keeps, as Claude Code holds them. That includes your prompts, the assistant's responses and its thinking, tool inputs and tool results, and the rows the engine appends, such as reminders and attachments.

A tool input or result can hold whatever the session touched: the contents of files, the output of commands, and anything that appeared in them. Claudit does not inspect or filter that content beyond cutting an oversized row to fit the configured limit.

Where it goes, and where it does not

The plugin posts each event over HTTP to a server that Claudit itself runs on your computer. The server listens on the loopback address 127.0.0.1 only, so it is reachable from your computer and from nowhere else.
The server writes the events to an archive folder under your home folder, ~/.claudit/archive unless you configure another, as plain files, one folder per day. It removes day folders older than the retention period, 30 days unless you configure otherwise.
The web page reads from that server, on your computer, in your browser.
Nothing is transmitted to mchiver, to Anthropic through Claudit, or to any other party. Claudit makes no network connection except to its own server on loopback.

Third parties

Two third parties are involved, neither of which receives any session data from Claudit:

cdnjs (Cloudflare). The web page loads four open-source libraries, AngularJS, Bootstrap, marked and DOMPurify, from cdnjs.cloudflare.com. When you open the page, your browser requests those files from Cloudflare, which sees that request as it would any web request. Cloudflare's own privacy policy governs it. Your session data is not part of that request.
GitHub. Installing or updating the plugin fetches it from GitHub. GitHub's privacy policy governs that.

Claudit runs inside Claude Code. What Claude Code itself sends to Anthropic is governed by Anthropic's terms and privacy policy, and is not changed by Claudit.

What the browser keeps

The web page keeps your look and layout choices, such as the theme, the size, the order of the turns and the width of the session list, in the browser's local storage, on your computer. It keeps nothing else and sets no cookies.

Your control

/claudit off in a session stops recording; the choice is kept across sessions until /claudit on.
The messages setting turned off stops the message rows, leaving only the turns and the calls, which carry no file contents or command output.
The retention_days setting decides how long the archive is kept. Deleting the archive folder, or any day in it, removes that record at once.
Uninstalling the plugin stops everything. The archive folder stays until you delete it.

Because the archive may hold sensitive material from your sessions, treat it as you would any private file under your home folder.

Children

Claudit is a developer tool. It is not directed at people under 18, and it collects nothing from anyone.

Changes

When this policy changes, the new version is published here with a new effective date. Changes that matter are noted in the release notes on GitHub.

Contact

Questions about this policy go to the project's issue tracker at github.com/mchiver/claudit/issues.