Privacy

QuotaTray is local-first. There is no QuotaTray cloud account and no default telemetry.

Settings live in%LOCALAPPDATA%\QuotaTray\settings.json
Provider credentials are only used by a supported live adapter. Demo mode is opt-in and its synthetic numbers are labelled as demo data; unsupported providers never receive guessed values.
Live refreshes contact provider services directly from your machine:api.anthropic.com for Claude,grok.com for Grok, andcloudcode-pa.googleapis.com plusoauth2.googleapis.com for Gemini. Codex usage is requested through the local Codex CLI. QuotaTray has no server that receives these credentials or provider responses.
The local HTTP API binds 127.0.0.1:6736 only — not your LAN — and does not enable browser-wide CORS. It never returns secrets.
Doctor scan reads path existence only; it does not upload paths.

Provider endpoints may change; the desktop app labels unavailable data instead of estimating values when a live endpoint stops responding.