Privacy
The short version: the app sends nothing anywhere.
Last updated DATE
What the app collects
Nothing. Shiplings has no account, no server of its own, and no analytics inside the companion. It reads what happens on your Mac and draws a character in the corner of your screen. Nothing about your code, your projects, your agents or your deploys is transmitted to us — there is nowhere for it to go.
It also asks for none of the sensitive macOS permissions: no camera, no microphone, no screen recording, no accessibility, no full disk access. That is a design constraint of the product, not a setting you have to find.
What stays on your Mac
- Your settings and your counters, in Application Support.
- Connector tokens, in the macOS keychain. They are read-only tokens you create yourself, and they never leave your machine.
- The GIFs you export, until you delete them.
Who your Mac talks to
Only the services you connect yourself, directly, from your machine: GitHub, Vercel or Netlify, to ask whether a deploy went green. Those requests carry your own token and go to those providers, not to us.
To show how much of your plan is left, the app asks Claude Code and Codex themselves, through the command-line tools already installed on your Mac. Those tools check with Anthropic and OpenAI under your own sign-in, the same way they do while you use them. The app never reads or holds that sign-in, and the answer (percentages and reset times) stays on your Mac.
The app also checks for updates by fetching a signed feed from shiplings.app. That request reveals your IP address and app version to the host, as any download does.
The website
The site sets no cookies and shows no consent banner, because there is nothing to consent to.
It uses Vercel Web Analytics to count page views and visitors, and nothing else. It sets no cookie, stores no identifier on your device, and cannot recognise you on any other site or on a later visit. The script is served from this domain rather than from a third party, so no request about you goes anywhere else. There is no Google Analytics, no advertising pixel and no session recording.
Only the page address is recorded, never what follows the question mark in it. That matters on one page: after a purchase you land on a URL carrying your payment reference, and that reference is not part of what is counted.
Our host, Vercel, keeps standard server logs including IP addresses.
If you buy a licence
Payment is handled by Stripe. We never see or store your card details. To send your licence key and issue your invoice we process your email address, and the billing details Stripe passes on, on the legal basis of performing our contract with you. Invoices are kept for as long as tax law requires, which is 10 years in France.
Stripe is our processor for payments; see Stripe's privacy policy. Licence key emails are sent through Resend.
Your rights
If the GDPR applies to you, you can ask for access to your data, its correction or deletion, a copy of it, or object to its processing. Write to hello@shiplings.app and you will get an answer within a month. You may also complain to your national data protection authority — in France, the CNIL.
The data controller is FULL LEGAL NAME, ADDRESS.
Changes
If this policy changes in a way that matters, the date at the top changes with it, and anyone holding a licence is told by email.