Privacy.
The site sets no cookies and runs no analytics. The app sends nothing on its own.
Sync is optional and off until you sign in. Your accounts are encrypted on your Mac with a passphrase only you know before they are uploaded, so the server stores ciphertext it can't read: not your tokens, not your emails, not which accounts you have.
Nothing phones home on its own: the network calls that exist are the ones you ask for.
Every network call it can make
- key tests
- one request to that provider, on your click
- skills catalog
- skills.sh, when you open the Skills module
- skill installs
- the skills CLI via npx, on your click
- cli runs
- your claude or codex, on your account
- claude limits
- api.anthropic.com usage, while the Accounts module is on
- cost chart
- ccusage via bunx, while the Accounts module is on
- sync
- encrypted accounts to Reodor's server, after you sign in to Sync
- token renewal
- Anthropic, OpenAI or xAI's own sign-in server, for your synced accounts
- codex, grok, cursor limits
- each provider's usage endpoint, while its module is on
- update check
- Sparkle, against the public releases repo
- first run
- the transcribe engine and NB-Whisper model, downloaded once
- the download
- Reodor.dmg, from GitHub, when you click
that is the whole list