Quotalight privacy policy

Two editions

Quotalight comes in two editions: one from the Mac App Store, and one you download directly from this website. Both work on your Mac only. Where they differ, this policy says so.

Quotalight is made by Taisuhing Nordic Moonlight, Estonia, which is responsible for this policy (the data controller). Contact: support@nordicmoonlight.com.

What the app reads

Quotalight shows the usage limits of AI coding tools. It reads them on your Mac. It does not read passwords, cookies or Keychain items, and it never opens the files where those tools keep your login.

Mac App Store edition

• Codex: the folder ~/.codex/sessions, only after you allow it in the macOS “Open” window. Quotalight reads only the lines with usage numbers (percent used, window length, reset time, plan type, tokens per day). It does not keep, show or send the text of your conversations. It refuses the folder ~/.codex, where Codex keeps your login.
• Claude Code: the file rate_limits.json in a folder you create and allow,~/.claude/quotalight. A status line command you add to Claude Code yourself writes only Claude Code’s limits there (percent used and reset time). It refuses the folder ~/.claude itself.
• It does not start Claude Code, Codex or any other program. You can disconnect either folder at any time in Settings.

Direct download edition

• Claude Code: it runs Claude Code’s own /usage command on your Mac and reads the percentages it prints. Claude Code uses its own login for this.
• Codex: it starts the Codex command-line tool on your Mac and asks it only for your rate limits.
• Antigravity: while Antigravity is running, it finds Antigravity’s local language server in the list of running programs, together with the access token that server was started with, and asks it for your limits. These requests go only to your own Mac (127.0.0.1). The token stays in Quotalight’s memory and is not saved or sent anywhere.
• Tokens per day: it reads Claude Code transcripts in ~/.claude/projects and Codex session files in~/.codex/sessions from the last 8 days, but only the usage numbers (date, model, token counts). Conversation text is not kept, shown or sent.

Claude Code, Codex and Antigravity talk to their own companies’ servers under their own privacy policies. Quotalight does not change that.

What stays on your Mac

Quotalight keeps a few small files on your Mac. We cannot see them.

• Mac App Store edition, in its sandbox container ~/Library/Containers/com.nordicmoonlight.quotalight: your settings, a history of readings (time, limit name, percent left) kept for 90 days, the folder permissions you gave, and a small log of when it read the limits (yes or no and error words, no file contents). Deleting the app removes all of it.
• Direct download edition, in ~/Library/Application Support/com.nordicmoonlight.limiidiriba: your settings, the same 90-day history, the last readings, window positions and, if you activate Pro, a license file with your key, its Polar activation ID and the trial start date. A small log in ~/Library/Logs/Quotalight notes which tools answered and any error words. To remove everything, quit the app and delete the app and these two folders (how to uninstall).

What leaves your Mac

Both editions: phone alerts, only if you set them up

If you enter an ntfy topic, Quotalight sends each alert (for example “Claude Code: Weekly limit” and “8% left”) with the topic name over HTTPS to ntfy.sh, a third-party service, so your phone can show it. ntfy.sh topics are public: anyone who knows the name can read the messages, so the app makes a long random name. See ntfy.sh’s privacy policy. Leave the topic empty and nothing is sent.

Direct download edition only

• License check with Polar (api.polar.sh), only after you enter a Pro license key. When you activate it, the app sends the key and our public Polar organization ID. If your key allows a limited number of activations, it also registers one, labelled with the fixed word “Quotalight”. No device name, serial number or other identifier of your Mac is sent. After that it checks the key about once a day (key, organization ID and activation ID). Removing the key asks Polar to free the activation. During the free trial nothing is sent.
• Updates: about once a day, and when you press Check for updates, the app readshttps://nordicmoonlight.com/quotalight/update.json. If you choose to install a new version, it downloads it from the address in that file and checks its signature before installing.

The Mac App Store edition has neither: it has no license check of its own and gets updates through the App Store. Like any request over the internet, the server that receives one sees your IP address.

Links you click in the app (website, support email, app stores) open in your browser, mail app or app store.

Purchases

Quotalight Pro for the direct download edition is sold through Polar (polar.sh), our merchant of record. Polar handles the payment, invoice and tax. We never see your card details. Polar shares with us what we need to support your order, such as your email address and what you bought. See Polar’s privacy policy.

If you buy anything in the Mac App Store edition, Apple handles the payment under its own terms.

Your rights and contact

The app sends us nothing, so we hold no app data about you. If you write to us or buy Pro, we use your email and order details only to answer you and support your purchase. You can ask us to see, correct or delete them at support@nordicmoonlight.com. You may also complain to the Estonian Data Protection Inspectorate (aki.ee).

Quotalight is a developer tool. It is not directed at children.

If this policy changes, the new version appears on this page with a new date. This policy covers the Quotalight app; this website has its own privacy policy.