Privacy Policy
Last updated 21 June 2026
Short version: Damask runs entirely on your Mac and transmits nothing about you or your code to us. There is no account, no telemetry, and no analytics.
What Damask does on your machine
- Runs Claude Code sessions. Each session is a real terminal (PTY) running your shell and the
claudeCLI in a project directory you choose. Damask does not proxy, intercept, or copy your prompts or Claude's output; they stay in the terminal. - Reads your local Claude Code transcripts. To show the usage / cost view and the context-window estimate, Damask reads the
*.jsonltranscript files Claude Code already writes under~/.claude/projects/. This is read locally and shown only to you; it is never uploaded. - Installs status hooks (with your consent). If you enable live status, Damask adds
UserPromptSubmit/Stop/StopFailure/Notificationhooks to each project's git-ignored.claude/settings.local.json. The hooks POST a small event (which pane, which state) to a localhost-only server inside Damask. Nothing leaves your machine. - Stores settings locally. Preferences, window state, per-directory dashboard URLs, and scratch notes live in a local settings file in the app's Application Support directory. They are not synced or uploaded.
- Writes a local crash log. If Damask hits an error, it appends the details to a
crash.login its Application Support directory so you can attach it to a bug report (Help → Reveal Crash Log). It is local-only and never sent anywhere. - Checks for updates. On launch (and when you choose Check for Updates) Damask asks
updates.damask.devwhether a newer version exists, sending only its own version, and downloads it if so. You can turn this off in Settings → Advanced.
What Damask does not do
- No accounts, sign-in, telemetry, or usage analytics. (Crashes are logged locally only — never transmitted.)
- No network connections to Damask-operated servers other than the update check above. (Claude Code itself talks to Anthropic per its own terms; that is between you, the
claudeCLI, and Anthropic.) - The optional in-app dashboard pane and any URL you open in a viewer load the page you point them at, in a sandboxed view — Damask doesn't route those requests anywhere else.
This website
This site (damask.dev) is a static page. It sets no cookies and runs no advertising or cross-site trackers. If we ever measure site traffic, it will be with a cookieless, privacy-respecting tool that collects no personal data — and we'll say so here.
Payments & licensing (future)
Damask is free during its alpha. When paid licensing ships, buying a license will involve a payment processor and a license check; that flow will carry its own disclosure. The app itself will remain local-first. (Not yet implemented.)
Contact
Privacy questions: matthew@zyxt.com (also reachable via Help → Send Feedback in the app).