AI Quota Tracker

Privacy policy

Last updated September 29, 2026

AI Quota Tracker (https://ai-quota.mckoss.com) records how much of your AI subscription rate limits you use. This policy explains what it stores, why, and how to delete it.

What we collect

  • Your Google account basics: your email address, name and Google account ID, received when you sign in with Google. They identify your account. No other Google data is requested.
  • Connected AI accounts: when you connect Claude, ChatGPT Codex, Gemini, or Muse, the login tokens or Muse session cookie you authorize this site to use, and the account email and plan where available. These credentials are encrypted at rest (AES-256-GCM) and are used only to read your usage limits.
  • Limit readings: about every 10 minutes, the percentage used and reset time of each limit window. The full response from the provider is kept for 30 days to diagnose problems; the percentages are kept until you delete them.
  • Agent usage you upload (optional): for each request your coding agents make, the model name, token counts, timestamp, request and session IDs, the project name (the git repository name, or folder name), and the machine name you chose. Prompts, responses, code and file paths are never uploaded.
  • Director runs (optional): for each run the director starts, its times, machine name, model, work item, branch, outcome, pull request link and the agent's closing summary. Agent transcripts stay on your machine.
  • Tasks you add (optional): each task's title, repository name, target model, where it finds work, status and the instruction prompt you write for your agents, notes you add to a task, and any director instructions you write.
  • Keys and sessions: a sign-in cookie, and the API keys you create. Only one-way hashes of session tokens and API keys are stored.

How it's used

Your connected-account credentials and uploaded agent data are used to show you your own usage and answer your own API requests. They are not sold, used for advertising, or used to train models.

Website analytics

We use Google Analytics to understand page visits, referring sites, device types and approximate visitor locations. Google Analytics uses cookies to distinguish visits. We send only fixed page names and URLs without query strings. We do not send account emails, provider credentials, API keys, project names, task content or uploaded agent data to Google Analytics. Authentication, connection, account, API-key and administration pages do not send page views. Automatic form, link and search tracking is disabled, as are advertising personalization and Google signals. See how Google uses information from sites that use its services.

Who can see it

  • Other users can't see any of your data.
  • Site administrators can see who uses the site and how much: your email, name, sign-in dates, which services are connected, how many keys you have, and how many records you store. Administrators do not look at your usage data, which contains only token counts and the names of your models and projects.
  • The site runs on Railway, which hosts the server and database. Your connected tokens are sent only to the service that issued them (Anthropic, OpenAI, Google, or Meta) to read your limits.

Deleting your data

You can delete your data yourself at any time on the Account page: remove your uploaded usage and limit history, or delete your whole account, which erases everything stored for it immediately. Disconnecting a service on the dashboard deletes its stored tokens. Uploads that are still scheduled on your machines will stop working once their keys are gone.

Children

The site is not intended for anyone under 13.

Changes

If this policy changes, the date above changes with it.

Contact

Questions: mckoss@gmail.com