Privacy

Updated November 9, 2026

Session Pets is built so your coding sessions stay on your Mac. This page lists everything the app and this website send anywhere.

Your sessions

Claude Code, Codex, Kimi Code, GitHub Copilot CLI and Gemini CLI run small hook commands that tell Session Pets when a session starts, works, finishes or needs you. To show a session, the app reads its project folder, title and last reply from those events and from the agent's own files on your Mac. It keeps its settings and a short queue of events on your Mac too. For Your Week and the Timesheet it keeps, for 400 days, when each session worked, the folder it ran in and its title; the first time, it reads those times back from the chats Claude Code and Codex already keep on your Mac, and never the prompts or replies. Forget My History in Settings deletes them. None of this is sent anywhere, and the app has no account.

Usage and crash reports

From version 1.3, Session Pets asks once, at the end of setup or in Settings under General, whether it may share anonymous usage and crash reports. Nothing is sent until you say yes, and you can change your answer there at any time.

With sharing on, once a day the app sends api.sessionpets.com a report of the days before today: the app's version, the macOS version, the kind of Mac processor, the day the trial started, whether the app runs on the trial or a license, the choices in Settings (such as the pet, Floating or Island, the theme and which switches are on), how often each feature was used per day (such as replies sent from the card or permission requests answered), how many sessions ran and which steps of the setup guide were reached. The report carries a random ID made on your Mac when you said yes, so days from the same Mac can be told apart. That ID is never tied to your license, your email or your Mac's hardware.

A report never holds a project, folder, file name, prompt, reply, command, song or license key. Settings, under General, has Show What's Sent, which shows the report exactly as it would go.

If Session Pets or its hook crashes, the crash report macOS writes for it is sent too. Before it goes, the app removes your Mac's user name and the IDs macOS puts in every report from that Mac. What's left is the app's code at the moment it crashed, the Mac model and the macOS version.

Until you choose, the counts stay on your Mac and the oldest are deleted after two weeks. Saying no, or turning sharing off later, deletes them from your Mac and has the server delete everything it received from it.

Plan usage

Your Claude plan usage comes from Claude Code's status line and from the copy Claude Code keeps in ~/.claude.json, both on your Mac. Session Pets never reads Claude Code's sign-in from your keychain and never contacts Anthropic or OpenAI.

From version 1.4, the arrow beside the numbers runs Claude Code's own claude -p /usage command when you click it, and at no other time. Claude Code asks Anthropic for your usage with its own sign-in, as it does when you type /usage, and writes the answer to ~/.claude.json, where Session Pets reads it. The command uses no tokens.

Song covers

While Apple Music or Spotify plays, the app shows the song's cover, once you've let it control that player. Apple Music's cover comes from the Music app on your Mac. For a song Music plays from a stream, such as an Apple Music radio station's, Music gives the cover of the song before it, so the app sends the song's title and artist to Apple's iTunes Search and downloads the cover it finds from Apple's image server. Spotify's cover comes from the address the Spotify app gives for it, on Spotify's image server. Like any web request, each download carries your IP address. React to Music in Settings turns the covers off with the rest of Now Playing.

Update checks

Once a day the app downloads sessionpets.com/appcast.xml to see whether a newer version exists. Like any web request, it carries your IP address, and it names the app and its version. The server keeps standard access logs of these requests. You can turn the daily check off in Settings and check by hand from the pet's menu.

Your license

The free trial needs nothing from you. When you enter a license key, and about once a week after that, the app sends api.sessionpets.com the key, a one-way hash of your Mac's hardware ID, the Mac's name and the app's version. That's how a key works on up to 2 Macs and how a refunded key stops working. Nothing about your sessions goes with it, and between checks the license works offline.

Your email

If you ask for a founding license or buy one, your email address is kept with your license key so the key can be sent, and sent again if you lose it. Brevo, the service that sends our email, delivers the key. If you asked for a founding license, or subscribed for a discount code once those were gone, your address also gets the occasional Session Pets update, and every update has an unsubscribe link; buying a license doesn't add you to that list. A discount code is made in Lemon Squeezy for your address, and we note whether that address later buys, to see if the offer works. The address is never sold, and it reaches X only as the one-way hash described below.

When you ask for a license, subscribe or buy from the site, we also keep where you came from, if the page knew: the campaign tags of the link you followed (such as an ad on X) or the name of the site that linked here, such as news.ycombinator.com. It's kept with your license or subscription, only to see which places bring people.

If an ad on X brought you here and you then ask for a license, subscribe or buy, our license server tells X that its ad led to it, so we can see which ads work. It sends X the click id that X put on the ad's link, a one-way hash (SHA-256) of your email address, never the address itself, and for a purchase the price. X can match that hash to an X account with the same address. If you didn't arrive from an X ad, nothing about you goes to X. The site itself loads nothing from X.

This website

sessionpets.com sets no cookies and stores nothing in your browser. Cloudflare serves the site and counts visits with Cloudflare Web Analytics, which works without cookies and doesn't follow you to other sites. The site runs no other analytics.

Buying Session Pets

Lemon Squeezy runs the checkout as our reseller and merchant of record. It receives your name, email address, payment details and country to take the payment, charge any sales tax and send your receipt, under its own privacy policy. It tells our license server your email address, name and order number so your key can be emailed to you, along with where you came from when you pressed Buy on the site, and tells it when an order is refunded. We never see your card.

Changes

If any of this changes, this page will say so, with a new date at the top.