Security and data.
Design Superpowers is a file that runs inside your own Claude. We run no servers, and we never receive your presentations, your files or your brand.
What you get
One file, design-superpowers.plugin (about 120 KB): a zip archive in Claude's plugin format. Inside:
| Part | What it is |
|---|---|
.claude-plugin/plugin.json | The name, version, author and description Claude shows |
skills/design-superpowers/SKILL.md | The designer's instructions, in plain English |
skills/design-superpowers/reference/ | 18 more instruction files in plain text: type, colour, layout, the handback, and so on |
skills/design-superpowers/assets/ | The shell every presentation is built in: a page, its stylesheet and the script that steps through the slides |
skills/design-superpowers/scripts/extract_brand.py | Measures colours, type and logos from a website, a document or an image |
skills/design-superpowers/scripts/render_frames.py | Takes pictures of the finished slides so the designer can check them |
skills/design-superpowers/scripts/inline_runtime.py | Puts that shell into a presentation, or brings an older one up to date |
skills/design-superpowers/scripts/make_team_file.py | Makes the team or company file, with your look inside, when you ask for it |
README.md, CHANGELOG.md | What it is and what changed |
A team or company file, Design Superpowers for [Company], adds a brand/ folder beside SKILL.md with your look (brand.json, with your colours and type, and your logos as files) and a LICENSE.txt naming your company and size.
You can read every line. Rename the file to .zip, open it, and read it. There is no compiled code, no hidden text and nothing encrypted.
Where it runs
- Inside your Claude, under your agreement with Anthropic. The designer is instructions Claude follows. The scripts run in Claude's own code sandbox, the same one Claude uses for any file it makes.
- No server of ours. No account, no sign-in, no licence check, no telemetry. The file never calls us.
- What you add to a chat stays in that chat, under your Claude settings for data and retention.
What it reaches, and when
| When | What | Where to |
|---|---|---|
| You give it a website | Claude's own web search or fetch reads the page, as for any request | The website you named |
| Claude's sandbox allows the internet (it was off on the account we tested) | extract_brand.py may open the website you named in a headless browser to measure its look, decline its cookie banner, and download its logo files | The website you named |
| The same | extract_brand.py asks Google Fonts whether a font exists | fonts.googleapis.com |
| Someone opens a finished presentation | The HTML file loads its fonts and a motion library. It works and reads the same without them | fonts.googleapis.com (or the brand's own font address), cdn.jsdelivr.net (GSAP, a pinned version with an integrity hash) |
Nothing goes to Design Superpowers, ever. The designer sends no email, posts nothing and uses no connector on its own.
What we hold about you
Only what buying needs. Stripe sells it to you, through Link, and passes us your name, email, country, billing address, the size you bought, and your company's name if you give it. We never see your card number. If you write to us, we keep the email. That is all. Details: Privacy.
The licence stamp
A team or company file names your company and size in plugin.json, in LICENSE.txt, and in what Claude shows under Customize. It is visible on purpose and does nothing else: it doesn't stop, count or report anything.
Updates
New versions come from us by email as a download link, never pushed. Nothing changes in your Claude until someone adds the new file. Claude asks “Replace existing plugin?” before one version takes another's place, and on Team or Enterprise the Owner can keep the version history and go back.
Enterprise review and scanning
Claude can hold uploaded plugins for review. Everything a reviewer needs is in the file and on this page. If you'd like this as a short PDF for your records, write to hello@designsuperpowers.com.
What we don't have
No SOC 2, ISO 27001 or penetration test: there is no system of ours to certify. No data processing agreement is needed for the product, because it processes nothing on our side. For support emails, our privacy notice covers it.
Report a problem
Write to hello@designsuperpowers.com. We answer quickly and fix a confirmed problem in the next release, or sooner.
Changes to this page
| Release | Change |
|---|---|
| 2.8, the first version on sale | First version of this page |