Privacy.
Finch lets the owner of a website, and the people they share it with, suggest and make changes on the live page. This page says what Finch keeps, why, and what you can do about it. It covers finchnotes.co, the Finch script that site owners add to their sites, and the Finch plugin for Claude Code.
What Finch keeps
- Your account. When you sign in with Google or an email link, Finch keeps your email address, your name and picture if Google shares them, and when you signed in.
- Your sites. The name and address of each site you add, and its settings.
- Notes and changes. What you write or change on a page, which page and element it was on, your name as the author, and its status (waiting, approved, applied, declined).
- Connected computers. When you run
/finch-install, Finch creates a key for that computer. Finch stores only a scrambled form (a hash) of the key, the computer's name, and when it was last used. The key itself stays in~/.finch/credentialson your computer. - Apply history. When you apply changes, Finch keeps which changes were included, the branch name, a short summary of what Claude did, and whether the deploy went live.
- Visits to finchnotes.co. Google Analytics records which pages are visited and a few button presses on finchnotes.co. The Finch script on your own site doesn't use analytics.
What Finch doesn't keep
Your code stays on your computer and in your own git repository. The Claude Code plugin makes the changes locally; Finch never receives your repository. Finch doesn't record your visitors' browsing, and doesn't sell or rent anyone's information.
Who else handles it
- Supabase stores the account and site data above.
- Vercel hosts finchnotes.co and the Finch script.
- Google handles Google sign-in and Analytics.
- Anthropic. When you run
/finch-apply, the notes and changes being applied are passed to Claude in your own Claude Code session, under your agreement with Anthropic.
These services may process data outside your country.
Who can see what
A site's owner sees every note and change left on their site. Someone who suggests changes sees only their own. People who aren't signed in see none.
How long it's kept, and deleting it
Finch keeps your data while your account is open. Deleting a site in finchnotes.co/app (or with /finch-uninstall) deletes its notes and changes. Disconnecting a computer deletes its key. To delete your whole account, or to get a copy of your data, email hello@finchnotes.co. We'll do it within 30 days.
Children
Finch is not meant for anyone under 18.
Changes and questions
If this page changes, the date at the top changes too. For significant changes we'll tell account holders by email. Questions: hello@finchnotes.co.