CCT
Português Star on GitHub 47

CCT / Privacy

Privacy policy

CCT runs only on your PC. It collects nothing about you, and the maintainers never receive any data from it. This applies to the download from GitHub and to the Microsoft Store package alike.

What CCT does not do

  • No telemetry. No analytics, no crash reports, no automatic update checks, no advertising IDs. Nothing is sent to the maintainers. Ever.
  • No account, no sign-up, no server of its own.

What it reads on your PC

  • The Claude Code login in %USERPROFILE%\.claude\.credentials.json and the Codex login in %USERPROFILE%\.codex\auth.json (or %CODEX_HOME%), to ask each provider for your usage. When the Codex endpoint can't be reached, it reads the Codex CLI's recent session logs, only for the limits they record.
  • CPU, RAM, GPU and disk activity, from Windows performance counters, shown on the taskbar and never sent anywhere.

What it sends, and where

  • Your Claude Code token goes only to Anthropic, at https://api.anthropic.com/api/oauth/usage. Your Codex token goes only to OpenAI, at https://chatgpt.com/backend-api/wham/usage. Each is sent only when you enable that provider, and only to read your usage limits.
  • When the Codex endpoint fails, CCT may ask the Codex CLI itself (codex app-server), which contacts OpenAI on its own. The opt-in Keep login active runs each CLI's own status command (claude auth status, codex login status). No prompt is sent and no quota is used.
  • Check for updates (Settings): only when you click it, CCT sends one request to GitHub's public releases API, https://api.github.com/repos/chiarorosa/claude-codex-taskbar/releases/latest, with no token and nothing about you, and compares the answer with its own version. GitHub sees the request like any visit, under its own privacy policy.
  • Those requests follow each provider's own privacy policy. CCT adds nothing to them beyond its name and version in the User-Agent.

What it stores, and where

  • Settings, in %APPDATA%\claude-codex-taskbar\.
  • Only if you use the Claude account switcher: the logins you choose to save, encrypted with Windows DPAPI for your Windows user, in %APPDATA%\claude-codex-taskbar\accounts\. A switch writes the Claude Code login (~/.claude/.credentials.json and the account name in ~/.claude.json) only when you pick an account.
  • Tokens are never logged, copied anywhere else, or sent to anyone other than their own provider.

Uninstalling the Microsoft Store package removes the data it created. With the portable .exe, delete the folder above to remove everything.

Contact

Questions or concerns: open an issue at https://github.com/chiarorosa/claude-codex-taskbar/issues. Security reports: see SECURITY.md.

Last updated 11 Nov 2026.