TokenDeck

Privacy Policy

Last updated: October 27, 2026

In short: the TokenDeck app collects no data. It has no account, no server of its own, no analytics, and no tracking. Your logins go from your Mac straight to the provider they belong to, and nowhere else.

Who is responsible

Tom Seidel
Werner-Heisenberg-Weg 1
59399 Olfen
Germany
Email: support@tokendeck.app

The TokenDeck app

No data collected

TokenDeck sends nothing to me or to any third party for analytics, advertising, or any other purpose. It contains no third-party code (no SDKs) and asks for no account.

What it reads on your Mac

Nothing is read until you have seen what TokenDeck reads and chosen Continue. Then, only for the sources you use:

TokenDeck never writes, renews, or deletes the Claude Code or Codex login and never keeps a copy of it. A login is held in memory only for the request it is needed for.

Where it goes

To fetch your usage, TokenDeck sends each login over an encrypted connection directly from your Mac to its own provider, and only to that provider:

These requests are between you and a provider you already use. The provider receives what it receives with any request: your login, your IP address, and a user agent naming TokenDeck and its version. I am not a party to these requests and receive nothing from them.

What stays on your Mac

TokenDeck keeps its settings, the last numbers it fetched (percentages, amounts, reset times, and when they were fetched), and the times of recent requests, so a restart shows the last numbers right away and does not ask the providers too often. These stay in the app's own sandbox container on your Mac (~/Library/Containers/com.tomseidel.tokendeck) and never contain a login. Removing the OpenRouter key in Settings deletes it from the Keychain.

The App Store

TokenDeck is distributed through the Mac App Store. Purchase and download are handled by Apple under Apple's privacy policy. If you have chosen to share analytics with app developers in your Mac's settings, Apple may give me crash reports and aggregated usage figures that do not identify you. I do not receive your name or email address from Apple.

This website

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel processes the technical data needed to deliver it and keep it secure, such as your IP address, the page requested, the time, and your browser's user agent, in short-lived server logs. The legal basis is Art. 6(1)(f) GDPR: a legitimate interest in a working, secure website. Vercel is certified under the EU-U.S. Data Privacy Framework. See Vercel's privacy policy.

This website sets no cookies, uses no analytics or tracking, and loads no fonts or scripts from other servers.

Email support

When you write to support@tokendeck.app, I receive your email address and what you write, and use them only to answer you. The mailbox is hosted by Spaceship, Inc. (Spacemail), USA. The legal basis is Art. 6(1)(b) GDPR where your message concerns your purchase or use of TokenDeck, and Art. 6(1)(f) GDPR otherwise. I delete messages once your request is settled, unless the law requires me to keep them longer.

Please never send a token, an API key, or the contents of auth.json. Support never needs them.

Your rights

Under the GDPR you have the right to access the personal data I hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. To use any of these rights, write to support@tokendeck.app.

You also have the right to complain to a data protection authority. The authority responsible for me is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.

Changes

If TokenDeck or this website ever starts to handle data differently, this page will say so first, with a new date above.