Privacy
Nibbl is a pixel pet mod for Claude Code. It needs a small server so every pet gets a serial number and a fair place on the leaderboard. This page lists everything that server receives, why, and how long it keeps it.
The short version
- Nibbl never sends your code, prompts, file names, file contents, commands, command output or anything from your conversation with Claude.
- There is no account, no email and no login. The server knows your pet, not you.
- Nibbl uses zero model tokens and never reads Claude's memory, chat history or uploaded files.
- There are no ads, no analytics trackers and no data sales.
What leaves your machine
| Data | Why | Kept for |
|---|---|---|
| A SHA-256 hash of your machine id (plus a fixed salt) | So the same machine always gets the same pet. The raw id never leaves your computer. | As long as the pet exists |
| Your pet's serial number and secret token | To prove a sync comes from the pet's owner. The server stores only a hash of the token. | As long as the pet exists |
| Event types and times: turn, check passed, commit, error, pet, hide | To compute XP on the server with hourly caps. Individual events are not stored, only hourly counts per type. | Hourly counts: as long as the pet exists |
The name and label you choose with /nibbl name and /nibbl label | Shown on your pet's public card and on the leaderboard. | Until you change them or the pet is deleted |
The serial of a nibbl you wave at with /nibbl wave | To deliver the wave to that pet. No text is sent. | Deleted after delivery (end of that day) or after 30 days at most |
The inviter serial you enter with /nibbl invite (once, at hatch) | To record the friend bond between the two pets. It gives no XP and no better odds. | As long as either pet exists |
| The plugin version | So new features reach only clients that support them. | Not stored |
The mod sees that a test passed, not what the test was: it checks command names locally against a short list (test, lint, build, typecheck, git commit) and sends only the event type.
Network and hosting
The server is a Cloudflare Worker with a Cloudflare D1 database, reached at getnibbl.pages.dev. Like any website, Cloudflare sees your IP address when the plugin or your browser connects. Nibbl itself keeps only a daily-salted hash of the IP, used to limit hatching to 100 pets per network per day, and deletes it after 2 days. Cloudflare's own request logs for the Worker are kept for a few days under Cloudflare's policies and are used only to debug errors.
What is public
Every pet has a public card at getnibbl.pages.dev/p/<serial> and may appear on the leaderboard. Public fields: serial, name, label, tier, shiny and genesis flags, level, XP, the seed that draws the pet, unlocked achievements with their dates, and the number of friends (the invite relation). Nothing on a card identifies the machine or the person.
What the server keeps about a pet
Besides hourly counts, the server keeps lifetime totals per pet of the same events: turns, checks passed, commits, failed tool runs, pets, waves sent and active days. They drive achievements and are kept while the pet exists. A snapshot of the pet's XP at the start of each week is kept for one week, to pick the Nibbl of the week (real pets only; hidden pets are excluded).
What stays on your machine
The plugin keeps your pet, the event queue waiting to sync, and small settings (notes you've seen, last rank, waves received, queued toasts, the day of the last greeting) in Claude Code's plugin store on your computer. Uninstalling the plugin removes them.
Delete your pet
Deletion removes the pet's row, its token hash, its hourly counts, its lifetime totals, its achievements, its week snapshot and week wins, its invite notices and waves (sent and received), and clears the invite link on any pet it invited, and frees its card and leaderboard spot. Serial numbers are never reused.
- Prove the pet is yours: in Claude Code run
/nibbl label delete me. Only the owner's plugin can set a label. - Open an issue at github.com/nuromirzak/nibbl/issues with the title
Delete #<serial>. Never post your export code. - The pet is hidden from the board right away and deleted within 7 days. Then uninstall the plugin, or keep it and a fresh egg will hatch.
Children
Nibbl is a developer tool for people who use Claude Code. It is not directed at children under 13 and does not knowingly collect data from them.
Contact
- Questions and problems: GitHub issues.
- Security reports: private security advisory (see SECURITY.md).
- The source code of the plugin and the server is public under the MIT license, so every claim on this page can be checked: github.com/nuromirzak/nibbl.
Changes
If nibbl starts sending anything new, this page and the plugin README change first, and the change ships in a new plugin version. The history of this page is in the repository.