Privacy

Summary

Agent Island runs entirely on your computer. It has no user accounts, no servers of its own, and no product telemetry. It does not collect, transmit, or store your personal data anywhere outside your machine. The only outbound network requests it makes are to the AI providers you already use, with credentials you already hold, to read the same usage figures their own dashboards show you. This page explains exactly what is read, what is written, where it lives, and what leaves — in detail, because a tool that reads your development records owes you that detail.

What the app reads on your machine

To determine session state the app reads the records each coding tool already writes locally: Claude Code and Claude Desktop transcripts and session metadata; Codex session rollout files and its session index; Grok's per-session directory including its event stream; Antigravity's chat files; and the local installation records of Cursor. It reads file modification times, session identifiers, project paths, session titles, token counters, and the structural markers that indicate a turn has ended. It reads these files in place and never copies them elsewhere.

What it does not read or do

It does not read your prompts or model responses for any purpose beyond deriving state — no conversation content is uploaded, transmitted, indexed remotely, or displayed beyond the session titles the tools themselves record. It does not scan unrelated files or directories, does not read your browser history, does not access your contacts or location, and does not run any keylogger, screen capture, or clipboard monitor.

Credentials

Provider credentials are read from where those providers' own tools store them: the macOS keychain entry written by Claude Code, and local authentication files written by Codex, Antigravity, Grok CLI, and Cursor. They are used in place to sign requests to that provider's usage endpoint. They are never uploaded, never sent to any address other than the provider that issued them, and never written anywhere new. When a provider rotates a refresh token during a normal request, the rotated token is written back exactly where its own CLI expects to find it, so the tools you already use keep working.

Network requests the app makes

The app contacts only: the usage endpoints of the providers you have signed in to, using your credentials; and GitHub, to check for new releases and download an update you accept. Nothing else. There is no analytics endpoint, no crash reporter, no license server, no beacon. You can verify this by reading the source or by watching the app with any network monitor.

What is stored locally

Preferences (which providers you display, alert settings, visual style, polling interval) are stored in standard application preferences on your machine. Cached usage snapshots, a session index, and computed cost ledgers are stored in the app's local storage. Parked Codex account files, if you use account switching, are copies of credentials you already had, stored in your home directory with owner-only permissions. All of it stays on your device and is removed when you delete the app and its preferences.

Alerts and notifications

Turn alerts are generated locally and delivered through the operating system's own notification mechanism. No notification content is sent through any external push service.

Report cards

Weekly and monthly cards are rendered locally from your own data. Copying, saving, or sharing a card is always an explicit action you take; the app never publishes or transmits a card on its own. Before you share a card, note that it contains your token totals, model mix, and estimated value — treat it as you would any screenshot of your work.

This website

This website is a set of static pages. It sets no advertising cookies and runs no cross-site trackers. Optional, privacy-preserving analytics may record aggregate page views to understand which documentation is useful; the consent control on this site lets you decline, and declining is remembered locally. Third-party links (GitHub, Product Hunt, provider documentation) are governed by those sites' own policies.

Children

The software is a developer utility and is not directed to children under 13, and no data is knowingly collected from them.

Your control and your rights

Because no personal data is collected by the project, there is no account to delete and no data export to request — the data is already yours and already local. You control everything by ordinary means: delete the app, remove its preferences, revoke a provider credential in that provider's own settings, or decline website analytics. If you have a question about data handling, the source code is the authoritative answer and it is fully public.

Changes to this policy

Material changes are reflected here with a revised date, and every revision is publicly visible in the repository history.

Contact

Privacy questions: hello@agent-island.dev, or open an issue at github.com/tristan666666/agent-island/issues.