genjutsu collects nothing.

The plugin

genjutsu is a set of Markdown instructions and local Python scripts. Claude reads them and acts on your machine, inside the session you started. Nothing is transmitted anywhere.

• No telemetry, no usage reporting, no crash reporting, no phoning home. No script shipped with the plugin makes a network request.
• No account, no sign-up, no licence key, no identifier of any kind.
• It reads and writes files in the project you point it at, and only there. The one exception is bunshin, which builds its clones' copies of the project in a temporary folder on the same machine. Nothing is copied off the machine.

One honest caveat. The three skills declare WebSearch among their allowed tools, so Claude may run a web search when a task genuinely calls for it. That request is made by Claude, under Anthropic's policy, not by genjutsu. What ends up in the query is Claude's call, and not something genjutsu controls.

bunshin goes further, and says so. It also declaresWebFetch. Its harvest reads the public pages a brief names, such as the client's current site or profile, and downloads the client's own images from them, and its research clones read the sites they study. Its capture script starts a headless Chrome on your machine and serves it your own build from disk, and nothing outside the build folder; that browser fetches whatever the page itself loads from other sites, as your own browser would.

This site

• No analytics, no tracking pixel, no fingerprinting, no cookies.
• One entry in localStorage, genjutsu:theme, remembering whether you chose light or dark. It never leaves your browser and clearing site data removes it. Never setting it is fine too: the site is dark until you pick light.
• Requests from your browser to one third party, the GitHub API. The star count in the rail is written into the page when the site is built, then refreshed fromapi.github.com/repos/AThevon/genjutsu, the repository's public record, so the number is current as of your visit. Each request carries no cookie, no token and no identifier of ours. GitHub sees what any web request shows: your IP address, your user agent, and that the request came from this site. Its privacy policy applies to those requests.
• The answer is reused for five minutes from sessionStorage, under genjutsu:stars, so a tab asks at most once every five minutes, and the browser clears it when you close the tab. If your browser blocks storage, each page view asks again. If the request fails, the number from the build stays. The version number in the footer is fetched at build time only. Nothing else is sent from your browser to anyone.
• Static files on a hosting provider, which keeps the ordinary web server access log any host keeps: IP address, user agent, requested URL, timestamp. It is not read by genjutsu, not joined to anything, and not used to build a profile.

Where other policies take over

genjutsu runs inside other people's software, and those parties have their own terms.

• Installing the plugin fetches it from GitHub, so GitHub sees that request. Their privacy policy applies, as it does to the star count request above.
• Running it means you are in a conversation with Claude, so Anthropic's privacy policy applies to that conversation.
• Impeccable, which bunshin offers to install and never installs without a yes, is a separate tool with its own author and its own terms. Its launcher downloads its binary on first run.

None of those is something genjutsu mediates or can see.

Changes, and asking

This page is versioned with the site, so every edit it has ever had is in the repository, with its date and its diff. There is no separate archive to trust.

Anything unclear, or a claim here you want substantiated, goes inthe issue tracker. The source is public: every statement above can be checked against it.