Tokenometer Menu-bar instrument · macOS 14+
Legal

Privacy Policy

Effective 24 August 2026 Tokenometer for macOS · tokenometer.live

1 · In short

Tokenometer collects nothing. The application contains no networking code, so nothing about you or your work can leave your Mac.

This policy exists to say precisely what that means — and to be straight about the three places where data about you does exist anyway: your own computer, the ordinary records Apple keeps when you install an app from the App Store, and the access log of the web server that sent you this page. None of those are things we would rather not mention.

2 · Who is responsible

Tokenometer is written and published by Brett Olmstead, an independent developer (“we” in this document). For the purposes of the GDPR and comparable laws, that is the data controller — although, as set out below, we hold no personal data about you on any system we operate.

Questions about this policy, or about anything in it you think is wrong: olmsteadbrett@gmail.com.

3 · What this policy covers

  • The Tokenometer application for macOS.
  • The optional status-line helper the app can install for you.
  • The website at tokenometer.live.

It does not cover Claude Code or any Anthropic service. Tokenometer reads files Claude Code has already written on your computer; how Anthropic handles your data is governed by Anthropic's own policies, and we are not affiliated with them.

4 · Data we collect

None. We run no servers that the app talks to, because the app talks to nothing.

  • There is no account, sign-in, licence key, device identifier, or advertising identifier.
  • There is no analytics, telemetry, usage reporting, or crash-reporting library in the app.
  • There are no third-party SDKs of any kind. The app has zero third-party dependencies — it links only Apple's own frameworks and the system SQLite library.
  • The application does not import Apple's networking frameworks (URLSession, Network) and opens no network connections, for any purpose — including checking for updates.

In App Store terms, our App Privacy disclosure is “Data Not Collected.”

5 · What the app reads on your Mac

Tokenometer reads files that already exist on your computer. It does not upload them, and it does not modify them.

LocationAccessWhat is used
~/.claude/projects/ Read-only Per-turn token counts, timestamps, model names, session identifiers and reasoning-effort levels. Also the text of Claude Code's own system-generated limit notices, which is how the app learns when a usage window actually reset.
~/.claude/settings.json Read always; written only if you install the helper The existing statusLine setting, so that installing our helper does not discard a status line you already had.

Your prompts and your code are never read

This is a property of how the parser is built, not a promise about our intentions. On every ordinary log line the app decodes only the usage and model fields and deliberately skips the message content; the body of your conversation is never brought into memory at all. The one exception is a line that Claude Code marks as synthetic, which is where a “you've reached your limit, resets at …” notice lives — from that the app takes a reset time and a percentage, and keeps nothing else from the text.

Your prompts, Claude's replies, your source code, your file names and your directory structure are therefore never read, never stored, and — there being no networking code — could not be transmitted even if they were.

6 · What the app stores on your Mac

Everything Tokenometer creates lives in one folder inside your own user library.

usage.dbA local SQLite cache of the aggregated counts and times above, so the app need not re-read hundreds of megabytes of logs at every launch.
gauge.jsonThe most recent official rate-limit percentages, if you installed the helper.
notification-state.jsonWhich alerts have already fired and what is snoozed, so you are not told the same thing twice.
bin/The optional status-line helper itself.
PreferencesYour settings, in the app's own macOS preferences domain.

The folder is ~/Library/Application Support/Tokenometer. None of it is transmitted, synced by us, or shared. It is covered by your Mac's own backups and disk encryption, and by nothing of ours.

7 · The optional status-line helper

To show your account's real limit percentages instead of an estimate, Tokenometer can register a small helper program as Claude Code's status-line command. This is off until you switch it on, and every other feature works without it.

  • The helper receives the status information Claude Code passes to any status-line command, keeps only the rate-limit figures, and writes them to gauge.json on your Mac. Nothing is sent anywhere.
  • Before its first change the installer backs up ~/.claude/settings.json and writes atomically.
  • If you already had a status-line command, ours wraps yours rather than replacing it — which means our helper runs a program that you configured, and prints its output. We do not inspect or transmit what your command produces.
  • Uninstalling restores your previous setting verbatim.

8 · Notifications

Alerts are local notifications posted by the app through macOS on your own machine, if you grant permission. They are not push notifications: no Apple Push Notification service token is requested, and no notification passes through any server, ours or anyone's.

9 · Apple, and installing from the App Store

We do not collect anything. Apple, as the store operator, does — and it is more honest to describe that than to imply the whole transaction is invisible.

  • Downloading the app is a transaction between you and Apple, governed by Apple's privacy policy. The app is free and has no in-app purchases, so we receive no payment details and no identity information.
  • If you have chosen to share analytics with developers (System Settings → Privacy & Security → Analytics & Improvements → Share with App Developers), Apple may make crash logs and aggregated performance metrics available to us through App Store Connect. Apple provides these in aggregated or de-identified form; they do not tell us who you are. You can withdraw that consent at any time in the same setting, and this app never asks you for it.
  • App Store Connect also shows us aggregate figures such as downloads and page impressions. These never identify an individual.
  • Ratings and reviews you choose to write are public, and are handled by Apple.

Anything Apple makes available to us is used only to fix defects and decide what to build next. It is not combined with any other data, because there is no other data.

10 · This website

  • No cookies. The site sets none, of any kind, and there is no consent banner because there is nothing to consent to.
  • No analytics and no trackers. No third-party scripts, tag managers, or tracking pixels.
  • No third-party requests at all. The stylesheet, the fonts and the images are served from this domain. Visiting this page does not tell any other company that you did — which would be a strange way to run the website of an app that makes no network calls.
  • Server logs. Like almost every web server, ours records each request: your IP address, the date and time, the page requested, the referring page if your browser sent one, and the browser's user-agent string. These are used only to operate the site and to investigate abuse or faults. They are rotated daily and deleted after about 14 days. They are never used to build a profile of you, and never sold or shared.

11 · Sharing and third parties

We share your information with no one, because we do not have it. There are no data processors, analytics providers, advertising partners, content-delivery networks, or subcontractors involved in the app or this site. Nothing is sold, and nothing is “shared” in the sense that California law uses the word.

12 · Retention and deletion

  • On your Mac. The app's data stays until you remove it. To erase all of it: uninstall the status-line helper from Settings first (this restores your Claude Code configuration), then delete ~/Library/Application Support/Tokenometer and move the app to the Trash. Nothing is left behind, and your Claude Code logs are untouched — the app never writes to them.
  • Website logs. Deleted automatically after roughly 14 days.
  • Everywhere else. There is nothing else. We hold no account, profile, or record of you on any system we operate.

13 · Your rights

Laws such as the EU and UK GDPR and the California Consumer Privacy Act give you rights of access, correction, deletion, portability and objection over personal data a company holds about you, and the right not to have it sold or shared.

We hold none. There is no account to access, nothing to correct, nothing to export, and nothing to erase — and no personal information to sell or share, which we do not do. The only data involved is on your own computer, entirely under your control, and removable at any time as described above.

If you believe we hold personal data about you, write to olmsteadbrett@gmail.com and we will answer within 30 days. If you are in the EEA or the UK you also have the right to lodge a complaint with your local supervisory authority.

14 · Children

Tokenometer is a developer tool and is not directed at children. Because it collects no data from anyone, it collects no data from children, and we do not knowingly hold information about anyone of any age.

15 · Security

The app's data sits in your user library and is protected by macOS itself — file permissions, and full-disk encryption if you have FileVault switched on. This website is served over HTTPS only, with plain HTTP redirected. Since we store nothing about you on our side, there is no database of user data to breach.

16 · Changes to this policy

If this policy changes, the revised version will be posted on this page with a new effective date. Should a future version of the app ever gain a feature that transmits data, it would be opt-in, explained in the app before you turned it on, and described here first. It will not happen quietly.

17 · Contact

Brett Olmstead — olmsteadbrett@gmail.com