Shiplings requests no camera, microphone, screen recording, accessibility or full disk access. It has no server and no account. That is not a policy, it is a constraint the features were designed around.
Updated 24 September 2026
| Permission | Requested? |
|---|---|
| Camera | No |
| Microphone | No |
| Screen recording | No |
| Accessibility | No |
| Full disk access | No |
| Automation of other apps | No |
This matters more than it used to. A menu bar app that wants screen recording to tell whether you are in a meeting is asking for the contents of every window you have open, for the rest of the time it is installed.
Full screen detection uses the height of the menu bar rather than asking the window server, so it is right for presentations and films and deliberately does not treat a maximised window as full screen. Video call detection looks at which apps are running, not at your screen or your microphone.
Those are the honest costs. The alternative was a permission prompt on first launch that most people would have said yes to without reading.
Not in the app. The website counts page views through Vercel Web Analytics, which sets no cookie and keeps no persistent identifier.
Only for the connectors you turn on, for updates, and for the plan gauges, which Claude Code and Codex fetch themselves. Everything else about the agents on your own machine works offline.
The app keeps working. There is no server for it to lose, and the licence is checked on your machine.