Last updated October 27, 2026. This covers the jCodeMunch software (the jcodemunch-mcp package and its Claude Code plugin) and this website. Both are run by jMunch, LLC, 213 Park Ave, Sheboygan, WI 53081, USA. Questions go to j@gravelle.us.
jCodeMunch runs as a local process. It reads the folders you index and keeps its index in ~/.code-index/, or the folder you set with CODE_INDEX_PATH. We never receive your code, your file paths or your queries. Everything else it records, such as the session journal, the per-tool counts and the optional performance log, stays in that folder too. Delete the folder and everything jCodeMunch stored is gone.
The savings counter. It's on by default, except in the Claude Code plugin, where it's off. It sends exactly three values to j.gravelle.us: a random anonymous ID, the number of tokens saved since the last send, and a lifetime total. It sends no code, paths, repo names, queries or per-tool detail. We keep the anonymous ID and its running total, and nothing else. Turn it off with share_savings: false in config.jsonc, or JCODEMUNCH_SHARE_SAVINGS=0.
License validation. It runs only when you run license, org-rollup or install-pack --license. It sends your license key to j.gravelle.us to confirm it, in the request body or a header, never in the URL. The check writes nothing on our side. The tools themselves never call it.
Starter packs. Fetched only when you run install-pack, from jcodemunch.com. Afterwards one event names the pack, its version and your platform; it's skipped when the savings counter is off. A premium pack also sends your license key. Each pack download is logged with the pack, its tier and a one-way hash of your IP address, never the address itself.
Downloads that send nothing about you: the optional embedding model, from huggingface.co, and a public token-counting file from openaipublic.blob.core.windows.net on first use of two tools. A release that removes the second is on the way.
AI summaries. Only if you configure a summary provider. Symbol signatures and docstrings then go to the provider you chose, under that provider's terms. Source code goes only if you also turn on the two settings that allow it.
The team savings report (org-report) sends six fields to a host you choose on your own network, never to us.
The full list, with every setting, is on the security page.
Visit counts. Each page view and each click on a buy link adds 1 to a daily count of page, source, medium, campaign and referring site. We don't store your IP address, browser details or any ID for you, and the counter sets no cookie.
How you first arrived. Your browser keeps a short note of the source, medium and campaign that first brought you here, in its local storage. It's passed to Stripe with a purchase so we know which channel led to it. Clear your browser's site data to remove it.
The teams question form. What you type is emailed to J and kept in a private log, with the time and your first-arrival note. The form doesn't record your IP address or browser.
Hosting. Our own code records no IP addresses. The company that hosts jcodemunch.com and j.gravelle.us may keep standard access logs, which include IP addresses, under its own terms.
Stripe processes card payments and emails your receipt; we never see your card number. From a purchase we keep your name and email, Stripe's reference numbers for it, the amount, currency and dates, and your license key, tier, seat count and expiry. We also log each license email we send: who it went to, its subject and whether it was delivered.
The only email we send buyers is the one with your license key, sent again only if the first one wasn't delivered. There are no reminders, renewals or marketing emails.
Invoices and purchase orders are handled by email at j@gravelle.us.
We delete purchase and license records 7 years after a license ends, and email delivery logs 7 years after sending. Starter-pack download and install logs are deleted 7 years after they're written, and your name and email once no purchase remains. The anonymous savings total is kept for as long as the counter runs. Email you send us is kept as ordinary correspondence.
We don't sell personal data or share it for advertising. We don't use your code to train models; we never receive it. Neither the software nor this site is meant for children.
You can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it. Write to j@gravelle.us with the email you bought with, or the license key. These are the rights that the EU and UK GDPR and California's CCPA give, and we give them to everyone, wherever you live. If you're in the EU or UK, you can also complain to your local data protection authority.
For the software, you're already in control: turn off the savings counter as described above, and delete ~/.code-index/ to erase what's stored locally.
When this policy changes, the date at the top changes.