Gondar privacy policy

In short

• Gondar reads Claude Code’s login only to ask Anthropic for your account’s usage and profile, and shows them to you. The login is never stored or sent anywhere else.
• It never sends a prompt, and never refreshes or changes the login.
• It has no account, no analytics and no tracking, and collects no data about you. Zewify receives nothing from it.

What it reads

Gondar reads Claude Code’s login from your Keychain by running macOS’s own security tool. It never writes to the Keychain.

It reads ~/.claude.json to learn which account Claude Code is signed in to, and ~/.claude/settings.json only to work out the status line command it suggests. It never writes to either file, or to any of Claude Code’s files.

If you route Claude Code’s status line through gondar-feed, the tool receives what Claude Code sends a status line and keeps only the usage limits from it (see below). Everything else, such as folders, transcripts, models and costs, is passed to your own status line command unchanged and never written.

The network

Every 5 minutes (every 15 while the status line keeps the numbers live), Gondar asks https://api.anthropic.com for the signed-in account’s usage and, when the login or the account changes, for its profile, with the login Claude Code already holds. Anthropic handles those requests under its own privacy policy. No prompt or file is ever sent.

Once a day, if Settings → Check for updates is on, Gondar asks https://api.github.com/repos/Zewify/gondar/releases/latest for the latest version number. It sends no login and nothing about your usage. GitHub sees the request’s IP address and the standard user agent macOS sends, under its own privacy policy.

The installer command contacts the same host to find the latest release, and downloads it from GitHub.

What stays on your Mac

Gondar keeps two files in ~/Library/Application Support/Gondar/, readable only by you:

• last.json: the last numbers shown, so a relaunch shows them at once. It holds the account and organisation IDs, the limits and when they were read; never a token, an email address, an organisation name or a plan.
• statusline.json: written by gondar-feed, holding only the limits from Claude Code’s status line, when each was received, and one-way hashes of session IDs with each session’s API time, so an idle session’s repeated numbers are not taken as new.

Its settings and the pop-out window’s place are kept in its preferences, ~/Library/Preferences/com.zewify.gondar.plist. Nothing it keeps is synced or uploaded anywhere.

Deleting everything

Turn off Settings → Launch at login and quit Gondar. If you routed Claude Code’s status line through gondar-feed, put statusLine.command in ~/.claude/settings.json back as it was. Then delete the app, the folder ~/Library/Application Support/Gondar/ and the file ~/Library/Preferences/com.zewify.gondar.plist. There is nothing held anywhere else to ask us to delete.

Changes

If Gondar ever starts keeping or sending something new, this page changes first, and the date at the top changes with it.

Contact

Questions about this policy go to support@zewify.com.