Privacy Policy
Last Updated: November 4, 2026
Introduction
Claude Code and Codex Assist is an unofficial, community-created VS Code extension that helps you manage your Claude Code and Codex CLI chat history. This privacy policy explains how we handle your data. It also covers CCAssist for Mac, the native macOS companion app, which has its own section below because, unlike the extension, it checks its licence with ccassist.dev.
Privacy-First Design
Claude Code and Codex Assist is built with privacy as a core principle:
- All data processing happens locally on your device
- Your chat history never leaves your computer unless you explicitly opt-in to community features
- No analytics or tracking is enabled by default
- The extension reads from your local
~/.claude/and~/.codex/directories only
Data Collection
Default (No Opt-In)
When you use Claude Code and Codex Assist without enabling any optional features:
- Your chat history, prompts and code are not sent to any server
- No analytics or usage statistics are collected
- All processing is done locally using WebAssembly (sql.js)
- Your chat history remains private on your device
Optional Community Features (Opt-In Only)
Community features such as the public leaderboard only send data after you switch them on. Exactly what the leaderboard sends and shows is described in the Leaderboard section below.
You can disable community features at any time through the extension.
Leaderboard
The public leaderboard at ccassist.dev/leaderboard ranks developers by their Claude Code and Codex usage. It is opt-in: nothing is uploaded until you sign in from the Leaderboard tab of the extension, choose a username and visibility, and turn sharing on.
What is uploaded
While sharing is on, the extension uploads daily totals built from your local usage rollup, the same numbers its Analytics tab shows. For each tool (Claude Code or Codex) and each day:
- the date
- active minutes
- turn count
- the version of the usage rollup and of the pricing table used to compute cost
And for each model used on that day:
- the model ID (for example
claude-opus-4-5-20251101) and reasoning effort - token counts by type: input, output, cache creation (including 1-hour and 5-minute cache writes), cache read and thinking tokens
- estimated API-equivalent cost
- request count
Each upload is tied to your account and to the device it came from (the extension's device ID and the device name, so you can see and remove your devices). Your email address is never shown publicly.
Never sent: project names, file or folder paths, session IDs, prompts, chat messages, code, languages or tools used, and your login tokens.
Showcase (optional): if you choose to showcase one project, we store the name, tagline and link you enter for it, and that one project's daily token counts and API-equivalent cost per model, from each device where you pick its folder. The folder path itself never leaves your device. A showcase is shown publicly only while your profile is Public; removing it, or deleting your leaderboard data, deletes it.
What is public
- Public: your username, avatar, bio and links, and your stats (API-equivalent cost, token counts, active hours, active days, streaks, ranks and daily history) together with the names of the models you used, on the board and on your profile page at ccassist.dev/leaderboard/u/<username>/.
- Anonymous: your stats are ranked on the board under a label such as "Anonymous #4821". There is no profile page, and your username, avatar, bio and links are not shown.
- Hidden: nothing is public. You are not ranked, and your data is kept only for your own view.
Profile links you add are shown with rel="nofollow ugc". The top of each board is reviewed by hand to keep rankings trustworthy, and uploaded days are checked automatically for plausibility.
Turning it off and deleting your data
- Turning sharing off in the extension stops uploads from that device and removes you from the board immediately. Data already uploaded is kept until you delete it, so you can turn sharing back on later.
- Removing a device in the extension deletes that device's uploaded data.
- "Delete my leaderboard data" in the extension, or deleting your account, removes your leaderboard profile and all leaderboard rows: daily totals, per-model rows and their revision history.
Retention
Leaderboard data is kept for as long as your leaderboard profile exists, and is deleted with it.
Error Reporting
If you opt-in to anonymous error reporting:
- Error messages and stack traces are sent to help us fix bugs
- No personal information or chat content is included
- Reports are anonymous and cannot be traced back to you
- You can disable error reporting at any time
Third-Party Services
Claude Code and Codex Assist may interact with the following services (only if you opt-in):
- Leaderboard API (ccassist.dev): Stores the daily usage totals you choose to share, as described in the Leaderboard section above
- Error Reporting Service: Collects crash reports and error logs (anonymous)
These services are hosted securely and do not have access to your chat content.
Data Storage
- All local data is stored in an SQLite database within your VS Code extension directory
- The database is never uploaded or shared unless you explicitly opt-in
- You can delete the database at any time through VS Code's extension settings
- Uninstalling the extension removes all local data
Separate product
CCAssist for Mac
CCAssist for Mac (bundle ID dev.ccassist.mac) is a native macOS app, sold separately from the extension. This section says exactly what it does with your data. The rest of this policy applies to your ccassist.dev account as well.
What stays on your Mac
- The app reads the session histories of Claude Code, Codex, Cursor, GitHub Copilot, Grok and OpenCode where those tools store them on your Mac, and builds a search index there. Transcripts, prompts, responses, code, diffs, file and folder paths, project names and usage numbers are never uploaded, to ccassist.dev or anyone else.
- The index, settings, quota cache and licence file are kept in
~/Library/Application Support/CCAssist; your ccassist.dev sign-in tokens and the date the app was first opened are kept in the macOS Keychain. - Features you switch on change only files on your Mac: the ccassist MCP server and skill are added to the settings of Claude Code, Codex and Grok, and live-status hooks to those CLIs' settings. The MCP helper answers only the agent on your Mac that started it and makes no network requests.
- No advertising or third-party analytics code.
What is sent, to whom and why
Everything below goes over HTTPS. Nothing else leaves your Mac.
| To | What | When | Why |
|---|---|---|---|
| ccassist.dev (licence check) | Your Mac's hardware UUID (IOPlatformUUID), the app version, today's date in your time zone, your macOS version and your Mac's name (as set in System Settings → General → Sharing). When you are signed in, also your session token, which identifies your account. | At launch, when the app comes to the front after an hour, every 6 hours, and a few times after a checkout. | To count trial days, confirm your licence, enforce the Mac limit, list your Macs, and tell the app when its version is no longer supported. |
| ccassist.dev (sign-in) | Your email address (and, for a new account, your name) to email you a sign-in code, the code you enter, and your Mac's hardware UUID to link it to your account. Signing in through the browser instead uses the ccassist.dev sign-in page. | Only when you sign in, sign out or deactivate a Mac. | To sign you in and keep track of which Macs use your licence. |
| ccassist.dev (checkout) | Your account and your Mac's hardware UUID, to create a checkout. | Only when you choose Buy. | To quote your price and attach the purchase to your account. |
| Polar or Dodo Payments | Your payment details, entered on their checkout page in your browser. They are never sent to ccassist.dev or to the app. The provider tells us the order ID, amount, currency, status and any refund. | Only when you buy. | To take the payment. Their own privacy policies apply. |
| ccassist.dev (usage statistics) | Your Mac's hardware UUID, app and macOS version, licence state, which CLIs you use and which app areas you opened. No session content. | Once a day you use the app. | To see which versions and features are used. Can be turned off in Settings → Privacy. |
| ccassist.dev (crash reports) | Your Mac's hardware UUID, app and macOS version, and where in the app's code it crashed or froze. No session content. | On the next launch after a crash or freeze. | To fix crashes. Can be turned off in Settings → Privacy. |
| ccassist.dev (updates) | The app version. Once a week also your Mac model, macOS version and language, with no identifier. | When the app checks for updates. | To offer new versions. |
| api.anthropic.com, chatgpt.com, cursor.com, grok.com | The sign-in token your Claude Code, Codex, Cursor or Grok install already keeps on your Mac, sent only to that same provider. CCAssist reads it from where the CLI stores it (for example Claude Code's Keychain item, ~/.codex/auth.json, Cursor's local state, ~/.grok/auth.json), never refreshes it, and never sends it anywhere else. | While a CLI is signed in on your Mac, to keep its plan usage current on the Usage page and in the menu bar. | To show your plan quota. The answers are cached on your Mac. Those providers’ own privacy policies apply. |
Like any web server, ccassist.dev sees the IP address each request comes from. The IP address is stored with your Mac's record when the Mac is first registered; rate limiting keeps only a keyed hash of it, never the address.
What ccassist.dev stores
- Your Mac: hardware UUID, Mac name, macOS version, app version, the IP address it was first registered from, when it last checked in, and the account it is linked to.
- Trial: per Mac, the first and latest day of use, the number of days used, the app version and the last account signed in; and one entry per Mac per day of use (the date only).
- Licence: on your account, whether you own the app, how (a purchase or extension Pro), the order that granted it and when it was granted or revoked.
- Orders: order and checkout IDs, payment provider, price tier, discount, currency, amounts, status, and payment and refund dates. A price quoted at checkout is held for your account for 60 minutes.
- Sign-in: your account (email and name) and session records for the Mac app, as for the website and the extension.
- Usage statistics and crash reports: as listed above, linked to your Mac and, once you sign in, your account.
Retention
These records are kept while your account exists, and trial records per Mac are kept so that a trial cannot be restarted. Order records are kept for as long as accounting and tax rules require. Deactivating a Mac or signing out unlinks that Mac from your account. To have your Mac app data deleted, email [email protected]. [RETENTION PERIODS — owner to confirm]
Your choices
- The trial works without an account. Until you sign in, what is sent is tied to your Mac only, not to an account (your Mac's name is still sent, so you may want it not to include your own name).
- Settings → Licence lists your Macs; deactivate one there, or sign out to free this Mac's place.
- Turn off usage statistics or crash reports in Settings → Privacy. Unsent data is then deleted.
- To remove everything from your Mac, delete the app and
~/Library/Application Support/CCAssist, and turn off the MCP server and hooks in the app first if you switched them on.
Your Rights
You have the right to:
- Use the extension completely offline (no internet connection required)
- Opt-out of all data sharing features (default state)
- Request deletion of any data you've shared (contact us via GitHub)
- Export your local database at any time
- Review the extension's privacy behavior with a local network proxy
Cookies and Tracking
This landing page and the VS Code extension do not use cookies or tracking scripts. If you enable optional analytics in the extension settings, anonymous usage statistics may be collected, but no personally identifiable information is tracked.
Children's Privacy
Claude Code and Codex Assist is not directed at children under 13. We do not knowingly collect any information from children. If you believe a child has provided data to us, please contact us via GitHub.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be announced through the extension's changelog and GitHub repository.
Contact
If you have questions or concerns about this privacy policy or how your data is handled, please:
- Open an issue on our GitHub repository: github.com/yashagldit/Claude-Code-History-VSCode
- Contact the developer on Twitter: @yashagl
Disclaimer
Important: Claude Code and Codex Assist is an unofficial, community-created extension. It is not affiliated with, endorsed by, or connected to Anthropic, OpenAI, Claude AI, or Codex. This extension is an independent project created to enhance the Claude Code and Codex CLI experience.