Privacy Policy

Last updated: 16 December 2025

The Short Version

QuotaMeter is designed with privacy as a core principle. We don't collect, store, or transmit your data. Everything stays on your device. We can't see your AI usage, your API keys, or anything else — even if we wanted to.

Who We Are

QuotaMeter is a product of Workdeskpro Ltd, a company registered in England and Wales (Company Number 15082883), trading as EncodeMK and QuotaMeter. For the purposes of data protection law, Workdeskpro Ltd is the data controller for any personal data we process (which is minimal — see below).

What Data We Don't Collect

Let's be clear about what QuotaMeter does not do:

  • We do not collect, store, or transmit your AI usage data to our servers
  • We do not access, store, or transmit your API keys to our servers
  • We do not track your browsing history or activity
  • We do not use cookies for tracking or analytics
  • We do not share any data with third parties for advertising
  • We do not use analytics services that identify you personally
  • We do not sell, rent, or trade any user data

What Data Is Stored Locally

QuotaMeter stores all data locally on your device. This data never leaves your machine:

  • Usage statistics: Information about your AI service usage (from Cursor, Claude, ChatGPT/Codex, OpenAI API, and Anthropic API) is cached locally to display in the dashboard
  • API keys: If you choose to track API usage for OpenAI or Anthropic, your API keys are stored encrypted using AES-GCM encryption via Chrome's secure storage APIs or macOS Keychain. These keys are only used to make direct requests to the respective APIs from your device
  • Settings and preferences: Your notification thresholds, display preferences, and service toggles are stored locally
  • License key: Your QuotaMeter license key is stored locally to verify your purchase. When you first enter your license key, it is validated once against our payment processor (Paddle) to confirm it is valid. After this initial check, the result is cached locally — no further validation requests are made

How QuotaMeter Works

Understanding how the extension works helps explain why your data stays private:

Web-Based Services (Cursor, Claude, ChatGPT)

For services with web interfaces, QuotaMeter reads usage information directly from each service's website when you're logged in. The extension accesses the same usage data you would see if you visited each site's settings or usage page. This requires you to be authenticated with each service in your browser.

API Services (OpenAI API, Anthropic API)

For API usage tracking, QuotaMeter makes requests directly from your browser to the OpenAI and Anthropic billing APIs using your stored API keys. These requests go directly from your device to the AI provider — they do not pass through any QuotaMeter servers.

Data Flow

All data flows directly between your browser and the AI services. There is no QuotaMeter server in the middle. We have no infrastructure that could receive or store your data even if we wanted to.

Browser Permissions

When you install QuotaMeter from the Chrome Web Store, you'll see a permissions dialog listing what the extension needs access to. Here's exactly what each permission is used for:

  • Storage: To save your settings, cached usage data, and encrypted API keys locally on your device
  • Cookies: To read your authentication status with AI services (we don't create or modify cookies)
  • Alarms: To schedule periodic usage data refreshes in the background
  • Host permissions for specific sites: To read usage information from cursor.com, chatgpt.com, claude.ai, api.openai.com, and api.anthropic.com only
  • Notifications: To alert you when you approach usage limits (optional, you can disable this)
  • Idle detection: To reduce background polling when you're away from your computer (saves resources)

We request only the minimum permissions necessary for the extension to function. We do not request broad permissions like "access all websites" or "read browsing history".

Purchase Information

When you purchase QuotaMeter, your payment is processed by our payment provider (Paddle), who acts as the Merchant of Record. This means:

  • What Paddle collects: Your email address, payment information, billing address, and transaction details
  • What we receive: Your email address (to deliver your license key) and the fact that a purchase was made
  • What we don't receive: Your payment card details, full billing address, or other financial information

Paddle handles all tax compliance (VAT, sales tax) as the Merchant of Record. Your payment information is governed by Paddle's Privacy Policy.

Email Communications

If you purchase QuotaMeter or contact us, we may send you emails for:

  • Delivering your license key
  • Responding to support requests
  • Critical product updates (security issues, breaking changes)

We do not send marketing emails unless you explicitly opt in. We do not share your email address with third parties for marketing purposes.

Website Analytics

This website (quotameter.app) uses Vercel Analytics to understand how visitors use our site and to measure the effectiveness of our marketing. Vercel Analytics:

  • Collects anonymized, aggregate data about page views and visitor counts
  • May use cookies to track conversions (e.g., whether a visitor makes a purchase)
  • Does not collect personally identifiable information
  • Does not track you across other websites
  • Data is processed by Vercel Inc. in accordance with their privacy policy

We may also run A/B tests on our website to improve the user experience. These tests may use cookies to ensure you see a consistent version of the site during your visit. A/B test data is anonymized and used only to measure which version performs better.

Important: This analytics applies only to the quotameter.app website. The QuotaMeter browser extension and macOS app do not contain any analytics or tracking code whatsoever.

Your Rights

Under data protection laws (including UK GDPR), you have rights regarding your personal data. However, since we don't collect or store your data, most of these rights are automatically satisfied:

  • Right of access: We don't hold your usage data or API keys — it's all on your device
  • Right to erasure: Uninstalling QuotaMeter removes all local data. You can also clear data in the extension settings
  • Right to portability: Your data is already on your device in accessible formats
  • Right to object: You can disable any features you don't want, or uninstall the extension entirely

If you have made a purchase and want us to delete your email address from our records, contact us at privacy@quotameter.app and we will process your request within 30 days.

Data Security

Your API keys are encrypted using AES-GCM encryption before storage. The encryption key is generated locally and stored in Chrome's secure storage, separate from the encrypted data. This means:

  • Your API keys are never stored in plaintext
  • Even if someone accessed your browser storage directly, they would see only encrypted data
  • The encryption happens entirely on your device using the Web Cryptography API

Children's Privacy

QuotaMeter is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

International Data Transfers

Since we don't collect or store your usage data, there's nothing to transfer. Your purchase information may be processed by Paddle in accordance with their privacy policy and applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. If we make material changes, we will notify you by:

  • Updating the "Last updated" date at the top of this page
  • Posting a notice on our website
  • For significant changes, sending an email to purchasers

We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

We aim to respond to all privacy inquiries within 30 days.