Privacy Policy — shiki (私記)

Last updated: August 2026

Short version

We collect nothing. shiki is a local-first note-taking app. Your notes never leave your machine unless you push them to a git remote you configured yourself.

shiki (TUI/CLI app)

• All notes are plain Markdown files stored in your own filesystem (~/.local/share/shiki or a directory you configure).
• Git sync uses remotes you configure (GitHub, GitLab, a bare repo on your NAS…). We never see or proxy that traffic.
• No telemetry, no analytics, no crash reporting, no accounts.

Shiki Capture browser extension

• Data collected: none. Nothing is transmitted to us or any third party.
• Local storage: the extension stores your preferences (default notebook, folder, tags, per-domain rules) in chrome.storage.sync, and an offline capture queue plus diagnostic logs in chrome.storage.local. This data stays in your browser profile.
• Captures: text/pages/images you explicitly send are written by a companion native host (shiki-native-host, open source) directly into your local notebooks folder on disk. The host only accepts connections from 127.0.0.1.
• Content script access: the extension reads page selection/title/URL only when you trigger a capture (right-click menu, popup, or keyboard shortcut). It does not browse, scrape, or report anything in the background.
• Permissions used: storage (preferences), contextMenus (right-click actions), activeTab/scripting (read selection of the tab you act on), nativeMessaging (talk to the local host), notifications (capture feedback). downloads is optional and only used to export your own logs.

Third parties

None. No CDNs, no fonts fetched at runtime by the extension, no remote code. The marketing site loads Google Fonts, but the app and extension do not.

Contact

Questions or requests: github.com/sazardev/shiki/issues

← back to shiki