PRIVACY & DATA · OCTOBER 1, 2026
Your research.
Your chosen services.
Plot & Kin runs on your computer. JEStats does not operate a hosted research service for this prototype. The server has no product analytics, telemetry, or automatic research upload to JEStats.
This notice covers the open-source local server and distributed client packages, version 0.1.0.
What stays with you
Cases, passages, findings, review decisions, logs, and processing state are saved in a local SQLite database by default. Original documents, page images, imports, and dossiers live in your local library. The default location is .plot-and-kin in your home directory. Your configured location can differ. Updating or uninstalling an extension preserves these files.
When information leaves your computer
- Your chat client. Codex or Claude receives the tool results and document content requested in your conversation. Its privacy settings and retention policies apply. Local storage does not make your conversation offline or private from your client provider.
- Public sources. DC searches send terms or map extents to the selected public service. Fetching a supplied public document URL contacts that site. These services receive ordinary connection information, including your IP address.
- Optional Astra. Explicitly transferred cases, or an explicitly selected Astra default, store structured research in your database. Original bytes stay local. Astra does not back up your document library.
- Optional OpenAI or Anthropic processing. Requested interpretation sends the relevant page, image, and instructions to your chosen provider. Its terms and policies apply. Providers never switch automatically.
- Installation and updates. Packages download from GitHub and its delivery services. Claude Code also downloads the exact dependencies in the plugin’s npm lockfile from npm and its delivery services. Marketplace hosts may check for updates under their own settings. The server does not send research to the package download host.
Credentials and control
The default local, public-record, and text-document workflow needs no database or model API credentials. Guided setup protects optional saved credentials with macOS Keychain or Windows DPAPI. Credentials are excluded from research exports and client registration files.
You choose what to import and which optional services to use. Only import material you are permitted to possess, process, and share. Dossiers and backups preserve original evidence content and are not automatically redacted. Review them before sharing.
The server does not automatically delete saved research. Make portable backups before removing your library folder. Manage copies held by your chat client or optional cloud services through those services. Deleting local files does not remove third-party copies.
Questions
Use GitHub issues for product questions. Issues are public. Do not post credentials, private addresses, confidential documents, or sensitive research. This notice describes our software's data flows, not third-party policies.