{"slug": "i-audited-3-ai-coding-tools-for-privacy-the-difference-is-100x", "title": "I Audited 3 AI Coding Tools for Privacy — The Difference Is 100x", "summary": "A developer audited three AI coding tools—Claude Code, Cursor, and Cline—for privacy and found that all archive conversations in local plaintext without informing users. Claude Code stored 43MB of conversation data and saved API keys in plaintext, while Cursor stored passwords in plaintext JSONL. Cline was the only tool to store API keys in the OS keychain but still archived all conversations. None of the tools achieved a perfect privacy score.", "body_md": "Claude Code stores 43MB of your conversations. Cursor saves your passwords in plaintext JSONL. Cline is the only one that puts your API key in the OS keychain — but it still archives everything you say.\n\nNot one of them tells you this is happening.\n\nTwo weeks ago, I discovered Claude Code had silently archived 43MB of my complete conversation history on my machine. I wrote about it. The comments asked: \"What about Cursor? What about Cline?\"\n\nI tested them. The results were more nuanced than I expected.\n\nThree tools. Five dimensions. One standardized test script.\n\n| Dimension | What I Tested |\n|---|---|\n| Conversation Storage | What's stored? Format? Size? |\n| Credential Security | How is the API key stored? Plaintext or encrypted? |\n| User Awareness | Does the tool tell you it's archiving your conversations? |\n| Data Isolation | Can AI in Project A read conversations from Project B? |\n| Uninstall Residue | Does conversation data survive uninstallation? |\n\nIn each tool, I typed the same three things: a normal coding question, a database connection string with a password, and an API key.\n\n**Conversation Storage**: `~/.claude/projects/`\n\n, JSONL format. One file per session.\n\nOpening one 2.3MB session file:\n\n| Content | Count |\n|---|---|\n| AI responses | 590 |\n| AI internal thinking | 272 |\n| Tool calls | 101 |\n| Tool call results (incl. file paths) | 100 |\n| File history snapshots | 208 |\n\n**Credential Storage**: `settings.json`\n\n— plaintext. The built-in Read tool can access this file without restriction.\n\n**Data Isolation**: No. Global history file merges all projects.\n\n**Uninstall Residue**: 19 project directories, 43MB of conversation data.\n\n**Conversation Storage**: `agent-transcripts/`\n\n, JSONL format. Same structure as Claude Code — user input, AI responses, tool calls all stored. Size depends on conversation length.\n\nStores every user input, every AI response, and every tool it called. Does not store tool execution results or thinking blocks — in Plan mode.\n\n**Credential Storage**: SQLite database stores tokens at 415 bytes each. Better than plaintext.\n\n**My test password and API key**: Both written verbatim into the transcript file.\n\n**Data Isolation**: Yes. Per-project separation.\n\n**Conversation Storage**: Open source, directly auditable. Each task gets its own directory with 4 JSON files:\n\n```\ntasks/<taskId>/\n  api_conversation_history.json   — Full API messages (incl. tool results)\n  ui_messages.json                — Chat UI records\n  task_metadata.json              — Metadata\n  context_history.json            — Context evolution\n```\n\nStores no less than Claude Code in conversation content — complete API message format, tool use and tool results included.\n\n**Credential Storage**: The only tool that got this right. API key goes through VS Code Secrets API to Windows Credential Manager. Not stored in a file.\n\n**Data Isolation**: Yes. Per-task isolation.\n\n| Dimension | Claude Code | Cursor | Cline |\n|---|---|---|---|\n| User input | Full text | Full text | Full text |\n| AI responses | Full text | Full text | Full text |\n| AI internal thinking | 272 entries | None | None |\n| Tool execution results | Includes file paths | Plan mode: no | Yes |\n| Session size | 2.3MB | 16KB | 4 JSON files |\n| API Key storage | Plaintext JSON | SQLite | OS keychain |\n| Conversation format | JSONL | JSONL | JSON |\n| User informed | No | Asked about sharing | No |\n| Cross-project isolation | No | Yes | Yes |\n| Open source (auditable) | No | No | Yes |\n\n```\nCredential security:  Cline >>> Cursor >> Claude Code\nConversation privacy: All three archive everything, none tells you\nData volume:          Claude Code >>>>> Cline > Cursor\nTransparency:         Cline (open source) > Cursor > Claude Code\n```\n\n**No tool scored perfectly.**\n\nThree tools. Three architectures. Two business models. One thing they all share:\n\n**They all archive your conversations in local plaintext. Not one tells you.**\n\nThis isn't one tool's vulnerability. This is the AI coding tool category defaulting to \"archive everything\" — and users not knowing it.\n\n| Level | Action |\n|---|---|\n| Daily | Periodically clean up conversation directories |\n| Never | Paste real passwords or tokens into AI conversations |\n| Before selling | Delete all tools' conversation archives |\n| When choosing | Know what each tool stores before you install |\n\n*Part 3 of the \"AI Tool Privacy\" series. Next: Prompt Injection in Practice — How a Malicious CLAUDE.md Can Make Your AI Betray You.*", "url": "https://wpnews.pro/news/i-audited-3-ai-coding-tools-for-privacy-the-difference-is-100x", "canonical_source": "https://dev.to/yurenpai_c188178e6b313e59/i-audited-3-ai-coding-tools-for-privacy-the-difference-is-100x-589i", "published_at": "2026-06-18 14:23:20+00:00", "updated_at": "2026-06-18 14:51:45.709252+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-tools", "ai-safety", "developer-tools", "ai-ethics"], "entities": ["Claude Code", "Cursor", "Cline", "Anthropic", "VS Code Secrets API", "Windows Credential Manager"], "alternates": {"html": "https://wpnews.pro/news/i-audited-3-ai-coding-tools-for-privacy-the-difference-is-100x", "markdown": "https://wpnews.pro/news/i-audited-3-ai-coding-tools-for-privacy-the-difference-is-100x.md", "text": "https://wpnews.pro/news/i-audited-3-ai-coding-tools-for-privacy-the-difference-is-100x.txt", "jsonld": "https://wpnews.pro/news/i-audited-3-ai-coding-tools-for-privacy-the-difference-is-100x.jsonld"}}