trigger-tree is local-only by design: telemetry is written to $PROJECT/.trigger-tree/ on your machine and never leaves it. No network calls, no external services, no dependencies. Before a project's /tt setup the user-wide fallback is hash (no prompt text), so installing the plugin never records prompt text in repositories that have not consented. A project that chooses truncate during setup stores a recognizable 200-character prompt preview in its own gitignored telemetry; off stores only markers.

The latest release on main receives fixes. Older versions: please upgrade.

Please do not open a public issue for security problems. Email me@heddevanderheide.nl with a description and reproduction steps. You will get a response within a few days; fixes are credited unless you prefer otherwise.