Legal

Privacy Policy

The short version: Claude Control Center processes everything locally on your Mac. No data leaves your machine.

Last updated: June 28, 2025 · Applies to Claude Control Center v0.1.0 and later

✓

No data collection. Claude Control Center does not collect, transmit, store, or sell any personal data, usage data, or telemetry. The app has no analytics, no crash reporting, and no remote logging of any kind.

What data Claude Control Center accesses

To function, CCC reads and processes the following data entirely on your local machine:

Tool call events from Claude Code (tool name, input arguments, session ID) sent over localhost:40440
File paths accessed by Claude Code during a session
Shell commands Claude Code requests to run
Session identifiers and project directory paths
Your approval decisions (Allow / Deny) for pending tool calls
Allow rules you configure in the Rules tab (stored in UserDefaults on your Mac)

None of this data is sent to any server, third party, or external service. All processing happens inside the app process on your Mac.

Network activity

Claude Control Center binds an HTTP server to 127.0.0.1:40440 (the loopback interface). This port is only reachable from processes on your Mac — it is not exposed to your local network or the internet.

The app makes no outbound network connections of any kind. There are no analytics endpoints, no update checks, no licence validation servers, and no cloud sync.

You can verify this at any time with:

lsof -i :40440 — shows only local processes

Data stored on your Mac

CCC stores the following data locally:

Allow rules — stored in UserDefaults under the bundle identifier app.sparshalc.claude-control-center. Delete with: defaults delete app.sparshalc.claude-control-center
Theme preference — stored in UserDefaults. Deleted with the same command above.
Session events (in memory only) — not written to disk. Cleared when the app quits.

No data is written to ~/Library/Application Support, iCloud, or any other location beyond UserDefaults.

Hook scripts

CCC installs hook scripts into ~/.claude/settings.json and copies script files into your Application bundle (not your home directory). These scripts:

Read JSON from stdin (provided by Claude Code)
POST that JSON to localhost:40440
Return a decision (allow / deny) as an exit code or JSON response

The scripts do not log to disk, do not phone home, and do not process data beyond what is needed to communicate with the local CCC server.

Third-party libraries

Claude Control Center has no third-party runtime dependencies. It is built entirely from Apple frameworks (AppKit, SwiftUI, Network, CoreGraphics) and the Swift standard library. There are no bundled analytics SDKs, crash reporters, or ad networks.

Children's privacy

CCC is a developer tool. It does not collect any information from anyone, including children.

Changes to this policy

If this policy changes materially (e.g. if a future version adds any form of data collection), the change will be noted prominently in the release notes and reflected in the "Last updated" date above. The policy history is tracked in the GitHub repository.

Contact

Questions about privacy? Open an issue on GitHub or email sparsha@sparshalc.app.