The short version first
Privacy
The CLI collects nothing. Runs are in-process, so your source and findings never leave your machine. This site keeps its own honesty standard: no hidden state and no silent tracking — just docs.
The crashtest tool
- No telemetry — the CLI collects zero data, makes no network calls, phones no home
- Your findings stay yours — reports and ledgers are files in your repo, under your control
- Never a secret — fake values arm the watermark probes; the docs, not the source, matter
- npm install traffic — npm's own registry logging applies, as with any package; we see none of it
This website
- No accounts, no forms, no in-browser state — information isn't collected about you
- Standard hosting logs — Cloudflare Pages may keep request logs (IP, timestamp); we neither buy, query, nor sell them
- Analytics — none configured; if a hosting-added beacon is ever enabled by zone policy, it will be listed here rather than hiding
- Cookies — none set by us; the site dwells in cookie-free simplicity
Third parties, named
This site runs on Cloudflare Pages; the npm package lives on npmjs.com; releases are signed through Sigstore. Their own policies govern their own logging. No other third parties are involved.
Data retention
Nothing of yours to retain. Permanent artifacts stay in your repos, not ours.
Questions
Open an issue on the repository — it's checked. If you want to inspect rather than ask: the CLI and the site are both open source, so treat this page as a summary of code you can go read.