Privacy statement
CloseWhat Threadmark tries not to write down.
Threadmark journals are short orientation notes stored locally under
~/.threadmark. They are not intended to be transcripts,
raw hook logs, or tool-output archives.
- Raw harness transcripts are not persisted into the journal.
- Raw hook payloads are not stored as journal material.
- Raw tool inputs and full raw tool outputs are not written to the journal.
- Tool activity is summarized before reflection; tool arguments are omitted from checkpoint excerpts.
- Redaction runs before the reflector call and journal write.
- Current redaction covers common GitHub tokens, OpenAI-style keys, Anthropic keys, bearer tokens, AWS access-key-shaped IDs, environment-style secret assignments, structured secret fields, npm auth tokens, and private-key blocks.
- Transient checkpoint excerpts are held in memory and dropped on daemon restart if the source excerpt is gone.
- Journal directories are created with private local permissions, and journal files are written with private local file permissions.
Redaction is best effort, not a security boundary. It can miss uncommon secret formats, encoded data, screenshots, generated files, arbitrary prose, or lossy tool summaries. For sensitive sessions, use no-journal mode.