TokenBar · English

神力條隱私權政策

生效日期：2026 年 10 月 28 日 · 營運者：BlueBox · 聯絡方式：tokenbar@bluebox.works

概要

神力條不收集你的個人資料，不做分析或廣告追蹤。Mac 程式只在你的電腦上讀取 Claude、Codex 的目前用量；資料透過你自己的 iCloud 同步到你的 iPhone。為了讓鎖定畫面卡片能自動出現並即時更新，另外使用一個不保存內容的中轉服務。

Mac 程式讀取的資料

• Claude、Codex 的用量與重置時間，以及官方登入回傳的帳號名稱（email），用來在你的裝置上顯示。
• 登入由官方 App 與 CLI 管理，憑證留在你的 Mac。查詢 Claude 用量時，神力條在你的 Mac 上讀取 Claude Code 的登入權杖，只送到 Anthropic 的官方端點；Codex 的用量由官方 CLI 自己查詢，神力條不讀 Codex 的登入資料。神力條不會把登入憑證送到 iCloud、中轉服務或其他地方。

iCloud 同步

用量、Widget 資料、提醒設定與裝置配對，存在你自己的 iCloud 私人資料庫，只有你的裝置能讀取，BlueBox 無法存取。

即時動態中轉服務

為了讓鎖定畫面與靈動島上的「即時動態」卡片能自動出現並即時更新，神力條的 Mac 程式會透過 BlueBox 營運的中轉服務，把卡片內容交給 Apple 推播服務（APNs），再由 Apple 送到你的 iPhone。

經過中轉服務的資料

• 各 AI（Claude、Codex）與使用端類型（Desktop、CLI）的剩餘額度百分比、重置時間，以及資料更新時間。
• 用來合併同一帳號的雜湊辨識標記：每台 Mac 各自加鹽計算，不是帳號 ID，無法還原成 email，也無法在不同 Mac 之間比對。
• Apple 發給你 iPhone、只能用來啟動即時動態的推播權杖，以及即時動態使用的廣播頻道編號。
• 你的 Mac 首次使用時隨機產生的識別碼與驗證金鑰，用來確認請求確實來自你的 Mac。這組識別碼與你的姓名、email、Apple ID 都沒有關聯。

不經過中轉服務的資料

• 帳號 email 與名稱：卡片經中轉時一律不帶帳號名稱，你的 iPhone 收到 iCloud 同步的資料後才在本機補上。
• 使用端暱稱、來源說明文字、狀態備註文字，以及提醒時間、排序等 App 設定。
• 登入憑證、AI 對話內容、API 金鑰、Apple ID，以及任何可直接識別你的資料。

保存方式

• 中轉服務只在轉送當下處理卡片內容，不保存、不記錄，也不用於分析或廣告。
• 只保存：Mac 的隨機識別碼與驗證金鑰（到你撤銷或停止使用為止）；防止重送攻擊的一次性編號（約 10 分鐘後刪除）；本小時與本日的請求次數（隨時間覆寫）；註冊時的防濫用計數（只存 IP 位址的雜湊，約一小時後刪除）；匿名的每日總數（當天約有幾台 Mac 使用，以及推送、錯誤等次數，保留 400 天，無法連回任何人或裝置）。
• 中轉服務架設在 Cloudflare Workers 上。Cloudflare 與 Apple 會依各自的隱私權政策處理網路連線所需的資料，例如 IP 位址。我們已關閉中轉服務的執行紀錄功能。
• Apple 會為每個即時動態頻道保留最新一則內容，讓暫時離線的 iPhone 重新連線後能顯示最新狀態。

無法使用時

中轉服務無法使用時，神力條會自動改用 iCloud 更新。卡片可能不會自動出現，或更新得比較慢，但其他功能不受影響。

Mac 版更新檢查

Mac 版會定期向本網站讀取最新版本資訊（appcast），以提示並安裝更新。這個請求不帶任何帳號或用量資料。

購買

在 iPhone 開始試用或購買時，交易由 Apple 處理，神力條不會取得你的付款資料。購買紀錄只存在你的 iPhone 上。

本網站

本網站不使用 Cookie、分析或追蹤工具，只在你的瀏覽器記住你選的語言。網站由 Cloudflare 託管，Cloudflare 會依其隱私權政策處理連線所需的資料，例如 IP 位址。

政策變更與聯絡方式

本政策有變更時，我們會更新本頁與生效日期。有任何問題，請寫信到 tokenbar@bluebox.works。

TokenBar Privacy Policy

Effective date: October 28, 2026 · Operator: BlueBox · Contact: tokenbar@bluebox.works

Summary

TokenBar does not collect your personal data and does no analytics or ad tracking. The Mac app reads your current Claude and Codex usage on your own computer, and the data syncs to your iPhone through your own iCloud. To make Lock Screen cards appear and update automatically, TokenBar also uses a relay that stores no content.

What the Mac app reads

• Claude and Codex usage and reset times, and the account name (email) returned by the official sign-in, shown on your own devices.
• Sign-in is handled by the official apps and CLIs, and credentials stay on your Mac. To check Claude usage, TokenBar reads Claude Code’s sign-in token on your Mac and sends it only to Anthropic’s official endpoint. Codex usage is checked by the official Codex CLI itself; TokenBar does not read Codex sign-in data. TokenBar never sends sign-in credentials to iCloud, the relay, or anywhere else.

iCloud sync

Usage, widget data, reminder settings and device pairing are stored in your own iCloud private database. Only your devices can read it; BlueBox cannot access it.

Live Activity relay

So that Live Activity cards on the Lock Screen and in the Dynamic Island can appear and update automatically, the Mac app sends card content through a relay operated by BlueBox to Apple Push Notification service (APNs), which delivers it to your iPhone.

What passes through the relay

• Remaining-quota percentages, reset times and data-update times for each AI (Claude, Codex) and client type (Desktop, CLI).
• A hashed tag used to merge cards for the same account. It is salted per Mac, is not an account ID, cannot be turned back into an email, and cannot be matched across Macs.
• The push token Apple issues to your iPhone for starting Live Activities, and the broadcast channel ID the card uses.
• A random identifier and verification key your Mac creates on first use, so the relay can confirm requests come from your Mac. They are not linked to your name, email or Apple ID.

What does not pass through the relay

• Account emails and names: cards sent through the relay never include them; your iPhone adds them locally from the same data synced through iCloud.
• Client nicknames, source descriptions, status notes, and app settings such as reminder times and ordering.
• Sign-in credentials, AI conversations, API keys, your Apple ID, or anything that directly identifies you.

Retention

• The relay processes card content only while forwarding it. It does not store or log it, or use it for analytics or advertising.
• The relay keeps only: your Mac's random identifier and verification key (until you revoke it or stop using TokenBar); one-time values that prevent replayed requests (deleted after about 10 minutes); this hour's and today's request counts (overwritten over time); an anti-abuse counter at registration that stores only a hash of the IP address (deleted after about an hour); and anonymous daily totals — roughly how many Macs were active and counts of pushes and errors — kept for 400 days and impossible to link to any person or device.
• The relay runs on Cloudflare Workers. Cloudflare and Apple process data needed for network connections, such as IP addresses, under their own privacy policies. Execution logging for the relay is turned off.
• Apple keeps the latest message for each Live Activity channel so an iPhone that was briefly offline can show the latest state.

If the relay is unavailable

TokenBar automatically falls back to iCloud. Cards may not appear on their own or may update more slowly; everything else keeps working.

Mac update checks

The Mac app periodically reads the latest version information (appcast) from this website to offer and install updates. These requests carry no account or usage data.

Purchases

When you start the trial or make a purchase on iPhone, Apple handles the transaction. TokenBar never receives your payment details. Purchase records are kept only on your iPhone.

This website

This website uses no cookies, analytics or tracking. It only remembers your language choice in your browser. The site is hosted by Cloudflare, which processes data needed for network connections, such as IP addresses, under its own privacy policy.

Changes and contact

If this policy changes, we will update this page and its effective date. For any questions, email tokenbar@bluebox.works.