Files local extension privacy

Last updated: 4 October 2026

Files is operated by Ship It! Software Limited, trading as Shipit Software. This page describes the standalone local MCP extension. The cloud service has a separate privacy policy.

Selected folders and local processing

Files processes file names, paths, sizes, timestamps, hashes and supported text under the folders you select. It uses these to list files, build a local search index, return source excerpts and refresh changed information. No account is required. The extension does not make network calls or send telemetry to Shipit Software.

The local search index is a SQLite database in the operating system's local application-data directory under Files/local-mcp, unless a custom cache directory is selected. Indexed text is not encrypted by this extension. Protect your device and select only folders you intend to share.

Information shared with your assistant

Requested tool results can include names, paths, metadata, search snippets and text excerpts. These results are returned to the MCP host and may be sent to Claude or another assistant provider. Their retention, processing and use are governed by the host and provider's policies and your settings. Local processing does not mean requested results stay on your computer.

Files does not upload source folders to filesforai.com, use an embedding service, or modify your source files. Connecting the separate cloud service requires its own permissions.

Retention and your controls

Cached information remains on your computer until it is refreshed, cleared or removed. Changing selected folders restricts what can be queried. Ask your assistant to clear the local index to delete its indexed content and pause background refresh until the next explicit refresh.

Disconnect the extension to stop caching across restarts. To remove cache database files, stop the process and delete its dedicated cache directory. These actions do not delete source files or erase copies already returned to an assistant or retained in a conversation.

Permission boundaries

Files rejects paths outside selected folders, symbolic links and hidden paths, and excludes dependency and build directories. These controls are not a secrets detector: visible text files may contain private information. The extension has no tools for writing or deleting your original files.

Help and changes

Read local extension help for limits, refresh and cache troubleshooting. This policy will be updated if local processing or sharing changes; the date above identifies this version.