Summary

• Add PRIVACY.md documenting all data access patterns in sidecar
• Add Privacy section to README.md linking to the new document

What PRIVACY.md covers

• AI agent adapters: All 9 adapters (Amp, Claude Code, Codex, Cursor, Gemini CLI, Kiro, OpenCode, Pi, Warp) with exact paths and file formats
• Git operations: Full list of git CLI commands executed
• File browser: File reads for preview, git blame/status, inline editing
• Notes plugin: SQLite database at .todos/issues.db with WAL mode
• TD integration: CLI commands and database reads
• Config/state files: Complete ~/.config/sidecar/ file inventory
• Project dotfiles: .sidecar/, .sidecar-*, .worktree-env, .td-root
• Tmux sessions: send-keys, capture-pane (with byte cap), prefix key reads
• Clipboard: Read (paste in interactive mode) and write (yank) operations
• Filesystem watchers: fsnotify usage for git, project files, and adapter directories
• Environment variables: Full list of vars read, including XDG, Go, Node, Python
• Executable detection: PATH checks for tmux, brew, git, td, go
• Network requests: Version checks (GitHub API, cached 3hr), changelog fetch, self-update, external CLI tools (gh, git), browser URL opening
• What sidecar does NOT do: No telemetry, analytics, crash reporting, credentials access

Iteration 3 improvements over v2

• Added Pi adapter (was missing)
• Added file browser plugin data access (file reads, git blame, inline editing)
• Added Notes plugin as separate section
• Added filesystem watchers (fsnotify) section
• Added executable detection section
• Added .worktree-env and .sidecar-rename-tmp to project dotfiles
• Expanded environment variables list (TMUX, GOBIN, GOPATH, GOFLAGS, NODE_OPTIONS, NODE_PATH, PYTHONPATH, VIRTUAL_ENV, TD_SESSION_ID)
• Specified SQLite drivers used (modernc.org/sqlite for Cursor, go-sqlite3 for Warp)
• Added tmux capture byte cap detail
• Added browser URL opening as separate section with platform commands
• Added parsed data details for adapter sessions

Test plan

• go build ./... passes
• go test ./... passes
• PRIVACY.md renders correctly in markdown
• README.md Privacy section links to PRIVACY.md

Nightshift-Task: privacy-policy
Nightshift-Ref: https://github.com/marcus/nightshift

🤖 Generated with Claude Code