Privacy Policy

Effective 2026-05-23 · covers all duolakit plugins and the duolakit-license verification service.

The short version

duolakit plugins run entirely inside your Claude Code session on your own machine. We do not collect telemetry, usage analytics, prompts, source code, or any other content you process with the plugins.

The only data we store is the email address Pro buyers give us at purchase, used to verify Pro activation. That's it.

What plugin data leaves your machine

Free tier plugins (openapi-guardian, token-guardian, prd-splitter):

• Nothing. All processing happens locally in your Claude Code session.
• token-guardian writes a local activity log to ~/.duolakit/token-log.jsonl — never transmitted.

Pro tier activation only:

• When you run /openapi-activate / /token-activate / /prd-activate, the plugin sends your email + the plugin name to duolakit-license.hxu92521.workers.dev/verify over HTTPS.
• The server returns { valid: true | false }. No data about your session, your code, or your usage is sent.
• The verification response is cached locally in ~/.duolakit/licenses.json so subsequent check calls are offline.

Pro tier /prd-push linear command (prd-splitter only):

• If you opt in by setting LINEAR_API_KEY and running the command, the plugin calls Linear's GraphQL API directly from your machine to create issues.
• Your Linear API key is read from environment each call and never written to disk.
• duolakit infrastructure does not see, log, or proxy this traffic.

Data we store on the license verification server

For Pro buyers, the duolakit-license Cloudflare Worker stores one record per purchase in Cloudflare KV:

• Email address you provided at purchase.
• Plugin name the purchase grants access to.
• Purchase timestamp (ISO date).
• Sale ID (an internal reference; informational only).

We do not store IP addresses, payment method or card details (payment is processed by Creem.io as merchant of record and never touches this server), browser fingerprints, or any usage data.

Deletion and refund

If you refund within 14 days (or any time, by request), the operator runs bash bin/admin.sh revoke <plugin> <your-email> which removes your record from KV within seconds. Subsequent plugin activations will fail.

To request full deletion at any time (refund or not), DM @hunterweb303 on X or t.me/dsa885. Deletion happens within 48 hours, typically within minutes.

What we do NOT do

• No analytics, no telemetry, no error reporting.
• No sale, sharing, or rental of your data to third parties.
• No marketing emails to purchase addresses (DM is for activation only).
• No tracking pixels or fingerprinting on the landing page (duolakit.pages.dev serves a static HTML file — no JavaScript analytics).
• No collection of Claude Code conversation content, prompts, code, or any output the plugins help you produce.

Children

duolakit plugins are developer tools for use with Claude Code. They are not directed at and not intended for use by children under 13.

Changes

If we materially change what data is collected or how it is used, the new policy will be posted at this URL with an updated effective date. Existing Pro buyers will be notified via the contact channel they used to purchase before any retroactive change takes effect.

Contact

Privacy questions, deletion requests, or anything else:

• Email · hxu92521@gmail.com
• X · @hunterweb303
• Telegram · t.me/dsa885
• GitHub issues · duolaAmengweb3/duolakit