Privacy policy
We collect nothing.
Surehand MCP runs entirely on your computer. Conform Labs has no accounts, no analytics and no telemetry, and nothing is sent to Conform Labs. This page lists everything the software and this website connect to.
Last updated · Applies to Surehand MCP for Adobe® After Effects® and conformlabs.co
Surehand MCP
It stays on your computer.
- No data to us. No account, no analytics, no telemetry. Conform Labs receives nothing from the software.
- Local only. The bridge inside After Effects listens on 127.0.0.1, your own computer. Its access token is stored in
~/.surehand/ae/config.jsonand is never sent over the network. - Your records stay local. The activity log and checkpoints are stored in
~/.surehand/aeon your computer. The log can contain project details such as names, paths and text, so treat it like your project files when you share it. - No keys handled. Chat inside After Effects runs Codex, Claude Code or Antigravity on their own sign-in. Surehand never stores or handles an API key or a sign-in.
Network requests
The only connections Surehand makes itself.
None of them carry your project or any data about you to Conform Labs.
| What | When | Where to |
|---|---|---|
| Update check | At most once a day. Reads the latest version number and installs nothing. Turn it off with "updateCheck": false in config.json. | GitHub's releases API |
| Server update | Only when you click Update now or run update. Checked against the SHA-256 GitHub publishes for the release file. | GitHub releases of ConformLabs/surehand-mcp |
| FFmpeg, for Preflight | Only after you agree. Checked against a SHA-256 pinned in Surehand's source. | Pinned builds: Martin Riedl's static builds (Mac), BtbN FFmpeg-Builds (Windows) |
| Node.js | Only with the zip installer, and only when no Node.js is found. Checked against nodejs.org's SHA-256 list. | nodejs.org |
| cloudflared | Only when you set up ChatGPT on the web. | Cloudflare |
Your AI app
Your AI provider's terms apply to the chat.
What your AI app sends to its own provider is governed by that app and provider, not by Surehand. That includes your prompts and the project content the AI reads, such as layer names, text and the frames it looks at.
ChatGPT on the web is optional. Its secure link, a Cloudflare quick tunnel, makes the server on your computer reachable at an address that contains your token, for as long as it runs. You start and stop it. Don't share the address.
This website
No cookies, no tracking.
- No cookies and no analytics. The site sets no cookies and runs no tracking or advertising scripts. Fonts are served from this site.
- Your theme choice (Ivory or Ink) is saved in your own browser's local storage, if you change it. It never leaves your browser.
- The download page asks GitHub's public API, from your browser, for the latest release's file names, so the buttons point at the right files.
- Hosting. The site is hosted on Cloudflare, which handles each request, including your IP address, to deliver the page, under Cloudflare's own privacy policy.
Questions
Ask on GitHub.
Open an issue for any question about privacy. To report a security problem, open an issue asking for a private contact and don't post the details publicly. If this policy changes, the date above changes with it.