Last updated: July 5, 2026
This Privacy Policy explains how Foldwork ("we," "our," or "us") collects, uses, and protects information when you use mcp-injector, the foldwork.dev website, or any related services.
mcp-injector runs entirely on your local machine. It does not transmit your source code, file contents, or project structure to any external server. All indexing, compression, and secret redaction happen locally before any data is sent to an AI provider (Anthropic, etc.).
mcp-injector collects no telemetry, usage statistics, or crash reports. There are zero outbound network connections from the daemon except for one: license key validation for Pro subscribers. License validation uses a challenge-response mechanism and does not transmit your code or file paths.
When you visit foldwork.dev, standard web server logs may record your IP address, browser user agent, and page visited. These logs are retained by our hosting provider (Vercel) for up to 30 days for operational purposes.
We do not use advertising trackers, third-party analytics, or persistent cookies for tracking purposes on this website.
Payments for Pro subscriptions are processed by Lemon Squeezy. We do not store your credit card number, billing address, or payment details. When you purchase a Pro license, Lemon Squeezy handles payment processing and issues a license key to your email address. Please review Lemon Squeezy's Privacy Policy for details on how they handle payment data.
When you activate a Pro license key, the mcp-injector daemon makes a one-time validation request to our licensing API. This request includes your license key and a machine-derived identifier. It does not include your source code, file paths, or personal information. After activation, license validation runs entirely offline.
If you contact us at foldwork@proton.me, we retain your email address and message for the purposes of responding to your inquiry. We do not add you to any mailing list without explicit consent.
Local index data created by mcp-injector is stored in ~/.mcp-injector/ on your machine. We have no access to this data. You can delete it at any time by running rm -rf ~/.mcp-injector/.
If you are in the European Economic Area (EEA) or the United Kingdom, you have the right to access, correct, or delete any personal data we hold about you. To exercise these rights, contact us at foldwork@proton.me.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance of the updated policy.
Questions or concerns? Email us at foldwork@proton.me.