claude.ai and chatgpt.com, using your own session cookies. None of that ever passes through any tokn.watch server.tokn.watch is operated by Spinbear, an independent development studio based in Berlin, Germany.
This policy explains what data the tokn.watch macOS application and the tokn.watch website collect, why, and what your rights are under the European Union General Data Protection Regulation (GDPR / DSGVO) and equivalent laws.
tokn.watch is a macOS menu-bar application that shows your remaining Claude and ChatGPT token usage in real time. It runs entirely on your Mac.
claude.ai) and OpenAI (chatgpt.com): standard HTTPS API requests carrying your session cookies, asking those services for your own usage data. This is functionally identical to what your browser does when you open the providers' web apps. Anthropic and OpenAI's own privacy policies govern that data.tokn.watch/appcast.xml for new versions. This is a static file fetch with no identifying payload. The Mac App Store build does not do this - updates go through the App Store.NSPrivacyTracking = false).For the Mac App Store build, our declared data collection is "Data Not Collected". This matches the technical reality: the app collects no data on behalf of the developer.
The website at tokn.watch is a static marketing and documentation site. Here is everything that happens when you visit it.
Our hosting and CDN provider (Cloudflare) keeps short-lived access logs in the ordinary course of running a website: IP address, user agent, requested URL, response code, timestamp. These exist for security and operational reasons (rate limiting, attack detection, debugging). They are not used to build profiles, are not shared with third parties, and are not retained beyond what is operationally necessary (typically 30 days or less).
The site is proxied through Cloudflare for performance and DDoS protection. Cloudflare processes your IP address and request metadata as a data processor on our behalf. Cloudflare's privacy policy.
The website uses Google Analytics 4 via Google Tag Manager to count visitors and understand which pages are read. GA4 is configured with IP-anonymisation (in effect by default in GA4) and does not collect personally identifiable information from us. A cookie named _ga and short-lived _ga_* companions are set in your browser to differentiate unique visitors.
Tag Manager loads after the page renders to keep performance fast and is deferred until your browser is idle. Google's privacy policy.
We do not set any other cookies. We do not show advertising. We do not track you across other websites.
Web fonts are loaded from fonts.googleapis.com. The React runtime is loaded from unpkg.com. Both transfer the request metadata (IP, user agent) to those providers as part of normal CDN behaviour. Neither receives any personal data from us.
/tips/)The tipping page is optional. If you tip via card, the transaction is processed by Gumroad, an independent merchant of record - they receive your card details and email address, not us. Gumroad's privacy policy. We see only the aggregated tip amount and the optional message you choose to leave.
If you tip via cryptocurrency by sending to one of the published wallet addresses, the transaction is recorded on the public blockchain you used. We see only the on-chain transaction; we do not link it to any other identifier unless you choose to tell us yourself.
Where this policy applies to you under GDPR, the legal bases for processing are:
If you are in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with equivalent rules, you have the right to:
To exercise any of these rights, email [email protected]. Since the app collects nothing and the website holds nothing tied to your identity, most requests resolve to "we hold no data about you" - but we will confirm that in writing if you ask.
tokn.watch is not directed at children under 13 (or under 16 where local law applies). We do not knowingly collect personal data from children. The app's App Store age rating is 4+ on the basis that it has no objectionable content, not because it targets young audiences.
Cookies and session data stored locally by the app persist until you sign out or uninstall the app. Server logs are typically rotated within 30 days. Analytics retention is set to the GA4 default of 2 months for event-level data; no user identifiers are retained beyond that window.
Some of the third parties listed above (Cloudflare, Google, Gumroad, Anthropic, OpenAI) are based in the United States. Where personal data is transferred to those companies, they each maintain their own appropriate safeguards under the EU-US Data Privacy Framework and Standard Contractual Clauses.
If we change anything material - new third-party integration, new data flow, new retention rule - we update this page and bump the "Last updated" date at the top. There is no separate notification because we hold no contact info to notify you with. Visit this page any time to see the current version.