Privacy Policy

Last updated: 3 October 2026 · Deutsch · applies to AI Cockpit for macOS. The iPhone, iPad and Apple Watch app is a separate program on a separate system and has its own privacy policy, with a table of every address it contacts.

The app

• No data collection. AI Cockpit does not collect, store or transmit any personal data, usage data or telemetry to me or to third parties.
• Your credentials stay on your Mac. API keys and login tokens are stored exclusively in the macOS Keychain on your device.
• Direct connections only. The app talks directly to the official endpoints of the providers you configure (Anthropic, OpenAI, Moonshot, OpenRouter, xAI, GitHub, DeepSeek), plus the providers' public status pages. No intermediary servers are involved. The privacy policies of those providers apply to those connections. Every address is listed in the security record.
• DeepSeek (from version 7.2). If you add a DeepSeek API key, the app asks api.deepseek.com for your balance — only that, with the key you entered, every 5 minutes. The key stays in the Keychain; without a key there is no connection to DeepSeek at all.
• GitHub status (from version 7.2). If the Copilot card is set up, the app reads GitHub’s public status file at www.githubstatus.com to name outages, as it does for Claude, OpenAI and Kimi. Nothing is sent there — no key, no token; only the public file comes back.
• The tip. Since version 6.5, the app offers a voluntary in-app purchase. It runs through Apple, not through me — your name, address and payment details never reach me; Apple reports aggregate amounts only. One single fact stays on your Mac: that a tip was given, so the app stops asking. It unlocks nothing.
• Local files. Reading Claude Code and Codex session data happens entirely on your Mac; nothing of it leaves your device.

This website

• No cookies, no tracking. This is a static site without analytics, advertising or social-media embeds.
• Server logs. The web server keeps standard access logs (IP address, timestamp, requested page) for security and operations. They are deleted automatically by the hosting provider, are not used for profiling and are not combined with any other data. Legal basis is my legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

Feedback form

If you use the feedback form, I store your message together with the optional name and e-mail address, the time of sending and the identifier your browser sends about itself, and I receive a notification by e-mail. Your IP address is kept only as a non-reversible hash, used to protect the form against abuse (rate limiting). This information is used solely to handle your request: no advertising, no passing it on to anyone.

Legal basis is my legitimate interest in answering enquiries and keeping the form usable (Art. 6(1)(f) GDPR); where your message concerns a purchase or a support case, it is Art. 6(1)(b). I keep a message for as long as your request needs it and delete it once the matter is closed.

Newsletter

The newsletter is optional and has exactly one job: to tell you when a new version of AI Cockpit is out. Nothing else goes through it — no advertising, no offers from anyone else, no third parties writing to you in my name.

What I store. Your e-mail address; the language you signed up in, so the mail arrives in the right one; whether the subscription is still pending, confirmed or cancelled; a random string that makes your confirmation and unsubscribe links work; the exact wording of the consent that was on screen when you signed up; and the dates of sign-up, confirmation and unsubscribing. Your IP address is stored as a non-reversible hash only, never in plain text — enough to stop someone entering other people's addresses by the hundred, and not enough for me to learn where you were sitting.

Why I ask twice. After you enter your address you get one single e-mail with a confirmation link. Until you click it, nothing else is sent and the entry stays inactive; unconfirmed entries never receive a newsletter. That is what keeps anyone from signing you up against your will. I store the wording you agreed to along with it, so that later on it can be shown what exactly was consented to — rather than me simply asserting it.

Legal basis. Your consent (Art. 6(1)(a) GDPR, and the corresponding provisions of the Swiss FADP). You can withdraw it at any time with effect for the future; the withdrawal does not make what happened before unlawful.

Getting out again. Every mail carries an unsubscribe link. One click is enough — no login, no password, no reason to give, no follow-up question. Your address is marked as cancelled the moment you click and is deleted after that; see the periods below.

How long I keep it. A sign-up that is never confirmed is deleted after 7 days. An address that has unsubscribed is deleted 30 days later; the short delay exists only so that an unsubscribe can still be shown to have been carried out. A confirmed subscription stays until you end it.

What I do not do. Your address is never passed on, sold or rented. There is no third-party advertising in the newsletter. And there is no tracking pixel and no rewritten links in it: I do not measure whether you open a mail, when you open it, or which link you click. The mails are sent directly from the server that runs this website; no mailing service is involved.

Your rights

Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR, you have the right to information about, correction of and deletion of your personal data, and to receive it in a portable form. The app itself collects nothing, so there is normally nothing to ask about there; for anything that reached me through the feedback form or the newsletter, just say so. You can always reach me through the contact form. Leave an address you can be reached at and the answer goes there; requests are handled within 30 days. You may also complain to a supervisory authority — in Switzerland the FDPIC, in the EU the authority of the country you live in.

Responsible entity

See the legal notice · Contact.