Privacy

Applies to the thisisfine plugin for Claude Code, Codex and pi, the npm package, and the GitHub Action. Last updated 9 October 2026.

Short version: thisisfine has no server. It collects nothing, sends nothing to its author, and has no telemetry. Everything it writes stays on your machine or in your own repository.

What it reads

Your prompts, as they're submitted. A hook looks at each prompt to tell whether you're answering "y" to a promise. It doesn't store or send the prompt anywhere.
Your agent's transcript file, on your machine, to confirm that a "y" was typed by you and not by the agent.
Your code and your app's responses, locally, while it runs your checks.

What it stores, and where

In your repository, under .thisisfine/: the promise sentences, the checks, and a signed record of each "y". That record includes the words you typed, a session id, and the path to the agent's transcript file. That path usually contains your OS username. These files are meant to be committed, so if your repository is public, they are too.
Proof runs, under .thisisfine/runs/: screenshots and the HTTP exchanges and command runs a check made, including request and response bodies, but no headers. This folder is gitignored.
In your home folder, under ~/.thisisfine/ (or $THISISFINE_HOME): your signing key, and a backup copy of your signed records and locked checks, so a lock can't vanish with a git checkout.

All of it is kept until you delete it.

What goes over the network

Setup downloads, once. The first time you set it up, it installs pinned versions of @playwright/test from the npm registry and Chromium through Playwright's installer (for web apps), or pytest and requests from PyPI (for Python). Those services see an ordinary download request. No data about you or your code goes with it. Go checks use your own toolchain and download nothing.
Your app stays on your machine. Checks start it on a localhost port, and the recorder listens only on 127.0.0.1.
The GitHub Action, if you add it to a workflow, runs on GitHub's runners and posts one comment on the pull request, using the token you give it.

Children

thisisfine is a developer tool and isn't directed at children.

This website

The site is hosted on GitHub Pages, so GitHub handles your visit under its own privacy statement. The home page loads its fonts from Google Fonts. The site has no analytics and sets no cookies of its own.

Changes and contact

Changes to this page are visible in the repository history. Questions go to the issue tracker.