Privacy policy

Last updated: 2026-11-06. Codex Tracker is a free, open-source Windows application published by Alexandre Do-O Almeida. It has no server and no user account: the developer receives none of your data.

Data read on your PC

To show your usage limits, Codex Tracker reads the quota information that Codex and Claude already store on your computer: the selected account’s identity (email, plan, organization) and its 5-hour and weekly limits, reset times and Codex reset credits. It never reads your conversations or code, never asks for a password, and never switches account or signs in for you. To read the active Codex account’s quota, it passes the current Codex access token, in memory only, to the Codex command-line tool installed on your PC, which asks OpenAI. It never stores this token or sends it anywhere else, and never uses Claude tokens.

Data stored

Accounts, quota history, preferences and reminder journals are stored only in your Windows user profile. Optional secrets (Google refresh token, ntfy topic, Twilio or SendGrid keys) are encrypted with Windows DPAPI for your Windows user. Uninstalling the app and deleting its folder removes them.

Google user data

Connecting Google is optional. When you click Connect Google Calendar, Google asks for your consent, and Codex Tracker requests only:

• calendar.events.owned: to create, update and delete, in your own calendar, the events it adds for your Codex reset credits (title, expiry date and reminders). It does not read, list or change your other events, and has no access to calendars shared with you.
• openid and email: to display which Google account is connected.
• gmail.send, only if you turn on email alerts: to send reminder emails from your Gmail address to that same address. It cannot read, list, modify or delete any message.

Google data is used only to provide these features on your PC. It is never sent to the developer or any third party, never sold, never used for advertising, and never used to train AI or machine-learning models. No human reads it. Codex Tracker’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time in Settings → Google Calendar → Disconnect, which revokes the access and deletes the stored token, or from your Google account permissions. Events already created stay in your calendar until you delete them.

Network connections

• GitHub, to check for and download updates (can be turned off).
• Public reset announcements, if enabled (can be turned off).
• Google APIs, only if you connect Google.
• Twilio or SendGrid, only if you configure them with your own account for SMS, calls or emails.
• This website uses Cloudflare Web Analytics to count visits: no cookie, no personal profile, nothing linked to the app.
• An ntfy server (ntfy.sh by default), only if you turn on phone notifications: it receives the notification text (account name, time) on a random topic you keep secret.

Coding assistants (MCP)

The local MCP server is off by default. When you enable it, the data you ask your assistant about is passed to that assistant and may be processed by its provider under its own terms.

Contact

Questions or requests: open an issue on GitHub. The detailed technical description is in the repository’s privacy notes.