VidCraft Privacy
Privacy in VidCraft: which data stays local, which skills trigger web searches, what reaches Claude and HeyGen or Synthesia, and why credentials do not belong in the configuration.
VidCraft Privacy
What stays local
VidCraft's Python code (MCP server, document parser, hook script) opens no network connections. It only reads and writes:
~/.vidcraft/config.yaml: your configuration~/.vidcraft/cache/state.json: state cache, contains a copy of the loaded configuration- Project files under the configured
content_root(Markdown), plusIDEAS.md - Source documents you have analyzed (only below
content_root)
What Claude sees
VidCraft runs inside Claude Code. Everything a skill reads or produces (scripts, briefs, documents, subtitle text) reaches the Claude model as part of the conversation. The privacy terms of your Claude account apply. Do not use VidCraft for material you are not allowed to process there.
Web search
Five skills may search the web or fetch pages. They derive the search terms from your project and topic.
| Skill | Tools |
|---|---|
researcher |
web search, page fetch |
audience-researcher |
web search, page fetch |
project-conceptualizer |
web search |
avatar-selector |
web search |
video-type-creator |
web search, page fetch |
All other skills do not access the web.
HeyGen and Synthesia
VidCraft does not connect to the platforms. You take the formatted script over yourself and thereby hand content to HeyGen or Synthesia. Their terms apply.
Subtitles
subtitle-generator runs Whisper locally on your machine. Claude creates the English translation of the SRT file, so the subtitle text goes to the model as part of the conversation.
Credentials
The configuration template contains no active fields for API keys, and the code does not evaluate any. Do not put credentials into config.yaml: the state cache stores the loaded configuration in plain text in ~/.vidcraft/cache/state.json.