privacy

What is read. What leaves.

almost empty looks at what other tools already left on your disk. it doesn't upload your chats.

on your machine

usage and session metadata —title, folder, branch, tokens— are read on the machine. they are not uploaded. they stay where claude, chatgpt, cursor or the rest left them.

to the accounts server

when it exists, what goes is the email, the device name and the platform. not the content of your chats. not the usage. not the transcripts.

third-party tokens

those of claude, codex, cursor and the rest never leave the machine. almost empty uses them to ask about your quota; it forwards them to no one.

keychain

offline grace and the license live in the keychain (macos), credential manager (windows) or secret service (ubuntu). not in a text file.

google

signing in asks for openid, email and profile. nothing from drive, nothing from gmail, nothing from contacts.

paddle

paddle will be the seller: it declares the vat of each country. until billing is live, payment is by email. no fake card window.

this website

the fonts come from google fonts. google can see your ip. it is the only third party on this landing page, and it is stated.

where you come from

if you arrive through a campaign link (utm_source, utm_campaign…), the page remembers it in your browser for 90 days to know which ad served. only a counter per day and campaign reaches the accounts server: no cookies, no ip address, no email. it is not cross-referenced with your account.