Privacy
cumba sends no telemetry, and everything stays on your Mac. A few features make network requests, but only while you use them.
What cumba can access
Everything here is off or unused until you turn on the feature that needs it. Nothing is asked for at launch. Settings > Permissions shows the current state of each.
| What | Why | When |
|---|---|---|
| System Now Playing helper | Media from every app, and its controls | Runs while cumba is running; turn off “Read media from every app” to use AppleScript instead |
| Automation for Spotify and Music | Read the current track; play, pause, skip, seek | Only with “Read media from every app” off; scripts are sent only while that app is already running |
| Automation for Notes | Notes widget: list your recent notes, open one, make new ones | Asked when you connect Notes in the widget or in Settings; cumba starts Notes in the background if it isn’t open and never changes an existing note |
| Reminders (full access) | To-dos widget: show, tick off and add reminders | Asked when you click Allow in the widget or in Settings |
| Calendar (full access) | Calendar widget | Asked when you click Allow in the widget or in Settings |
| Location | Weather where you are | Asked when you click Use My Location; not used if you choose a city |
| Camera | Mirror widget | Only while the panel shows it; nothing is recorded |
| Local server on 127.0.0.1 | Connecting the optional YouTube extension | Only after you turn it on in Settings > Connections |
| Private Unix socket | Claude Code and Codex hooks, and script activities | Only while hooks are installed or script activities are on |
| ~/.claude/settings.json, ~/.codex/hooks.json | Installing and removing the agent hooks | Only after you review the change; a backup is kept |
| Claude Code transcripts in ~/.claude/projects | Context use and session title in the AI Agents widget | Only the last 256 KB, read on this Mac while a session runs |
| Accessibility | Handling the volume or brightness keys | Only if you turn on replacing the system volume or brightness indicator |
| Clipboard | Clipboard History widget | Only while that widget is in the panel |
| Files and Folders (Desktop, or wherever screenshots go) | New screenshots for Clipboard History; files you drop on the Tray | Only if you turn on “Add new screenshots” or use the Tray; macOS says why when it asks |
| Login item | Launch at login | Off until you turn it on |
Network requests
These features reach the network, but only while you use them:
| Feature | Request |
|---|---|
| Media with Spotify | Album artwork from Spotify’s image server (i.scdn.co), for the panel and the closed notch |
| Media with YouTube | Thumbnails from YouTube’s image servers (*.ytimg.com, *.googleusercontent.com, *.ggpht.com; the address the page itself uses), for the panel and the closed notch |
| Weather | Your location rounded to about 10 km, or the coordinates of the city you choose, to api.open-meteo.com; with your location, the same rounded coordinates to Apple Maps for the city name; a city you search for, with your language, to geocoding-api.open-meteo.com. Only while the widget is on screen, at most once every 15 minutes |
| Update check | The list of releases from api.github.com at launch and once a day, with cumba’s version in the user agent; turn it off in Settings > General |
What stays on your Mac
The camera runs only while the panel shows the Mirror widget, and nothing is recorded. The Tray keeps only file paths. Clipboard History keeps your last 20 copies in memory only and skips items that apps mark as passwords. While it’s in one of your tabs, it checks once a second whether the clipboard changed, even with the panel closed, so it doesn’t miss a copy. With “Add new screenshots” on, it watches the screenshot folder and keeps only the location of new screenshots.
Notes and To-dos go through Apple’s own Notes and Reminders. cumba sends nothing anywhere; iCloud syncs changes to your other devices as it always does. The note from earlier versions (notes.txt) is copied to Apple Notes once, and the file is left in place.
The microphone and camera indicator reads only whether a device is in use, never audio or video. Claude Code data (commands, file paths, messages) is kept in memory only. When turned on, the extension server listens only on 127.0.0.1, accepts only the cumba extension and needs its own token, which is stored in your Keychain.
What cumba never does
It sends no telemetry and never asks for an administrator password. It installs no helper tools, kernel extensions or system extensions, and doesn’t change system settings. It never downloads code or updates itself.
The App Sandbox is off, because a sandboxed app would need exceptions to script Spotify and Music, to run the socket the agent hooks reach, and to edit ~/.claude/settings.json. Hardened Runtime is on, and the app has only the entitlements it needs: Apple Events, calendars, location and camera.
This website
This site sets no cookies, has no analytics and loads nothing from other servers while you read it. Its pages are static files served by Vercel, which, like any web host, processes your IP address to deliver them.
The download button fetches the file from GitHub, whose privacy statement applies to that request.
When you pick a theme, your browser keeps its name so the next page wears it too. The name stays on your device and is never sent anywhere.