Security & data
What we can show today, stated plainly. No claims we cannot back.
This website
- Static HTML and CSS. No JavaScript, no cookies, no analytics, no third-party requests. Everything the page needs is served from rethinker.dev.
- HTTPS through Cloudflare, with HTTP Strict Transport Security and a content security policy that allows only this site's own resources.
- security.txt is published at /.well-known/security.txt.
The rethinker.dev domain publishes SPF, DKIM and DMARC records. Messages you send us are forwarded by Cloudflare Email Routing to an inbox we manage; see Privacy.
The product
rethinker's Claude Code companion is in private beta. What it reads, what it sends to the Claude API and under whose key, and what, if anything, it sends to us, is documented for beta teams on request at info@rethinker.dev. We will publish those details on this page before general availability.
Our commitments
- Your code stays yours. rethinker is a tool for your team; it does not claim rights over what it reads.
- Teams, not leaderboards. We never rank individual engineers by usage.
- Measured in money, with our own overhead included. rethinker's own Claude calls are visible in the cost view, never hidden.
Reporting a problem
Found a security issue in this website or in the product? Write to security@rethinker.dev. Our security.txt lists the same address.