Privacy Policy

#Summary

• Licensed to Fix runs locally, inside Claude Code on your own PC.
• The plugin contains no telemetry, no analytics and no network calls to the author. Nir Sharon (the author) receives nothing from your PC or your sessions.
• Your conversation with Claude, including tool output, is processed by Anthropic under your own Claude account and Anthropic's policies.
• Before shell output reaches the model, a hook redacts common PC identifiers (computer name, user name, IP and MAC addresses, serial numbers, and more). Redaction is best-effort, not a guarantee.
• Files the plugin's skills create (tickets, reports, a knowledge file, an error log) stay on your PC, in your Documents folder.

#1. Who we are

Licensed to Fix is a free, open-source (MIT) plugin made by Nir Sharon (LinkedIn). In this policy, "we" means the author. The plugin is not a hosted service: there is no Licensed to Fix server, account or database.

#2. What the plugin does with data

2.1 Local processing

The plugin is a set of files that Claude Code loads on your PC: two skills, four slash commands, and three hooks (small Node.js scripts). Everything they do happens on your PC:

• Safety guard (PreToolUse hook). Before Claude runs a shell (Bash or PowerShell) command, the hook reads the command text and either lets it through, asks you to confirm it (medium-risk changes such as services, registry writes, drivers, restart, firewall rules, scheduled tasks, software installs), or blocks it (destructive actions such as disk format or wipe, boot configuration changes, HKLM registry deletes, recursive deletes of system folders, disabling Microsoft Defender or the firewall, local account changes, and download-and-run patterns). The command text is checked in memory and is not stored or sent anywhere by the plugin.
• Redaction (PostToolUse hook). After a shell command succeeds, the hook replaces identifiers in its output with placeholder tokens before the output is passed to the model (details in section 3).
• Failure note (PostToolUseFailure hook). When a shell command fails, the hook adds a redacted copy of the error text as extra context (it cannot replace the original error; see section 3.2).

2.2 Files stored on your PC

The skills instruct Claude to keep local records in Documents\IT-Agent-Quick\ on your PC:

You can read, move or delete any of these files at any time. Removing the plugin does not delete them automatically.

2.3 What the plugin does not do

Based on the plugin's source code:

• No telemetry, analytics, crash reporting or usage tracking.
• No network requests to the author or to any server of ours. The hook scripts use only Node.js built-in modules (crypto for hashing) and local files.
• No cookies (the plugin is not a website).
• It never asks for passwords, tokens, product keys or other secrets. Do not type them into the chat.

The one exception to "no network" is the read-only network check (/licensed-to-fix:net-check and the offline script). To test your connection it pings your router and a public address, opens a test connection to port 443, and looks up three well-known website names (Microsoft, Google, Cloudflare) through your DNS and through Cloudflare's public DNS resolver. These are connectivity tests only; no data about you or your PC is sent in them.

#3. Redaction and its limits

3.1 What is redacted

Successful Bash and PowerShell output is scanned and the following are replaced with tokens such as <COMPUTER#1a2b> before the model sees them:

• Product keys (5×5 format)
• Windows security identifiers (SIDs)
• MAC addresses
• IPv6 addresses
• IPv4 addresses (except loopback, unspecified and broadcast addresses), marked private or public
• Email addresses
• User names inside user-profile paths
• DOMAIN\user pairs
• Serial numbers and service tags that follow a label (such as "SerialNumber:" or "Service Tag:")
• Computer names that follow a label (such as "Hostname:" or "ComputerName:"), and default-style names that start with DESKTOP-, LAPTOP-, WIN- or PC-
• User names that follow a label (such as "UserName:")

The token includes a short one-way hash, so the same value maps to the same token and Claude can still tell two different machines or users apart without seeing the real value.

3.2 Limits (please read)

Redaction is best-effort, pattern-based and not a guarantee:

• It covers only the output of Bash and PowerShell tool calls. It does not cover what you type, screenshots or images you upload, files Claude reads with its other tools, or the ticket page content.
• Values that don't match a pattern (for example a computer name printed without a label, a Wi-Fi network name, a proxy server name, a printer name or a file name) can pass through.
• When a command fails, Claude Code does not let a hook replace the error text. The hook adds a redacted copy, but the original error may still reach the model. For diagnostics that might fail, the plugin includes scripts/Invoke-Redacted.ps1, which redacts at the source.
• If you have enabled telemetry or OpenTelemetry in Claude Code, those systems may record the original output before the hook runs.
• If Node.js is missing or a hook fails to start, redaction does not happen for that call. On Claude Code 2.1.295 or later, the safety guard is configured to block the tool call if it fails to start; the redaction hook is not.

Treat everything shown on screen during a session as potentially visible to the model.

#4. Third parties

Claude may also use its own tools (such as web search) during a session when it looks up a fix. Those tools are part of Claude Code and are governed by Anthropic's terms, not by this plugin.

We do not sell, rent or share data, because the plugin sends none to us.

#5. This website

The plugin itself sets no cookies and uses no analytics.

This website uses no analytics and sets no cookies. If we ever add analytics, it will be a cookieless tool, and we will update this page before it goes live.

#6. Children

Licensed to Fix is a tool for adults who manage their own PC. It is not directed at children, and we collect no personal data from anyone. Use of Claude is subject to Anthropic's own age requirements.

#7. Your choices

• Review every command before you approve it; prefer Claude Code's Manual permission mode for IT work.
• Run /licensed-to-fix:guard-status to confirm the guard and redaction are active.
• Delete the local files listed in section 2.2 whenever you like.
• Uninstall the plugin at any time with /plugin uninstall licensed-to-fix@licensed-to-fix-marketplace.
• For data Anthropic holds, use your Claude account settings and Anthropic's privacy controls.

#8. Changes to this policy

If the plugin's data handling changes, we will update this page and its effective date, and note the change in the repository's CHANGELOG.

#9. Contact

Questions: open an issue at github.com/nsharon4/licensed-to-fix/issues. Please do not include personal data or PC details in a public issue.

For privacy requests, or if you don't have a GitHub account, email [email protected].

Author: Nir Sharon · LinkedIn