Privacy Policy

Overview

Token Limits (“we,” “us,” “our”) is a SaaS tool that compresses tool responses in AI coding sessions to reduce token usage. It works with Claude Code, Claude Desktop, Cursor, Windsurf, VS Code, JetBrains, and other MCP-compatible tools. We are committed to protecting your privacy. This policy explains what data we collect, what we do not collect, and how your information is handled.

What Data We Collect

We collect the minimum amount of data necessary to operate the service:

What Data We Do NOT Collect

We want to be explicit about what we never collect, transmit, or store:

How Compression Works

Both the Claude Code proxy and all MCP tools route requests through tokenlimits.app for compression. Data passes through our servers in memory, is compressed, and is forwarded to its destination (Anthropic or your local filesystem tool). Nothing is written to disk. When content is compressed, the original is held in server memory for up to 2 hours so Claude can request the uncompressed version, then discarded automatically.

Claude Code (proxy): API requests from Claude Code are routed through tokenlimits.app/api/proxy, compressed, then forwarded to the Anthropic API. Your API key and conversation content pass through in memory only and are never stored or logged. Dashboard statistics are generated locally and served at localhost:4800 -- this data never leaves your machine. If AI summaries are enabled, large tool outputs may be sent directly to Anthropic's Haiku model using your API key -- this goes to Anthropic, not to our servers.

MCP tools (Claude Desktop, Cursor, Windsurf, VS Code, JetBrains, Codex): The binary runs locally to perform filesystem operations and shell commands. Raw output is sent to tokenlimits.app/api/compress with your license key for compression, and the compressed result is returned. Nothing is written to disk or retained after the request completes. Sensitive paths (.ssh, .env, .aws, etc.) are blocked locally and never transmitted.

Third-Party Data Sharing & Subprocessors

We do not sell, rent, or trade your data. We rely on a small set of subprocessors to operate the service, each handling only the data needed for its function:

Business customers can request a Data Processing Agreement (DPA) and the current subprocessor list at our Data Processing Agreement page.

Analytics

The marketing website uses Google Analytics 4 to understand aggregate traffic (page views, referrers, approximate location). It measures the website only and never has access to the product, your code, files, prompts, or tool outputs.

Analytics loads only after you accept via the cookie banner. If you decline (or ignore it), Google Analytics is never loaded and no analytics cookies are set. You can change your mind by clearing site data. We do not use Google Analytics for advertising.

Cookies

Essential: a single session cookie (tl_session) keeps you logged in. It is required for the site to function and is not used for tracking.

Analytics (optional, consent-based): if you accept the cookie banner, Google Analytics sets its own cookies (e.g. _ga, _ga_*) to measure aggregate traffic. These are never set unless you accept. We use no advertising or cross-site tracking cookies.

Data Retention

Account data (email, hashed password, license key, usage count) is retained for as long as your account is active. When you delete your account, all associated data is permanently removed from our servers.

Security audit records (authentication events, account changes, and the IP address they came from) are kept separately for up to 12 months for fraud prevention and security investigations, then automatically purged. These minimal records may outlive account deletion for that window.

Local data (cached license verification, dashboard stats, configuration) is stored on your machine and can be removed at any time by running token-limits uninstall.

Data Deletion

To remove all local files, run token-limits uninstall. This removes the binary, configuration, cached license data, and dashboard files from your machine.

To delete your account and all server-side data, email us at [email protected] and we will permanently remove your account within 30 days.

Platform Support

Token Limits runs on macOS, Linux, and Windows (via WSL for Claude Code, native for Claude Desktop). The same privacy guarantees apply across all platforms. Compression is local by default regardless of operating system.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, email [email protected]. We will respond within 30 days.

California residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information.

Security and Breach Notification

We use industry-standard security measures to protect your data, including encrypted connections (TLS), hashed passwords, and secure payment processing via Stripe. If we become aware of a data breach affecting your personal information, we will notify affected users by email within 72 hours and take steps to mitigate the impact.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email or by posting a notice on the service at least 14 days before the changes take effect. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions or concerns about this privacy policy? Email us at [email protected].