Privacy Policy

Effective date: June 17, 2026

Mana is operated by Silent Spell, the trading name of an independent software developer based in California, USA, who is the data controller for the purposes of this policy. Contact: support@silent-spell.com.

Overview

Mana is a macOS menu-bar app that shows AI quota information for vendor tools you already use locally. Mana does not create vendor accounts, ask for vendor passwords, scrape browser cookies, take possession of vendor credentials, or send vendor credentials to a Mana server. Instead, Mana reads the authentication material — such as access tokens or session credentials — that those vendor tools already stored on your Mac when you signed in to them yourself. When checking quota, Mana uses that material only as authentication for a secure HTTPS request to the matching vendor API.

Vendor quota data

Mana discovers supported vendors from local authentication state on your Mac, such as Codex CLI, Claude Code, Gemini, Antigravity, and Cursor. To retrieve quota or usage information, Mana uses the relevant local credential only to authenticate a secure HTTPS request to that vendor's own API. Vendor credentials are not copied, stored by, or sent to Mana or Silent Spell.

When a vendor token is refreshed, Mana may update that vendor tool's local credential file or Keychain entry on your Mac so the local session stays current. Vendor credentials are still not sent to Mana or Silent Spell.

Quota availability depends on the vendor tool being installed, signed in, and able to reach the vendor API.

Because Mana contacts each vendor's API directly from your Mac, that vendor may receive your IP address, request metadata, timestamps, and account or session identifiers as part of servicing the request. For these direct requests the vendors act under their own privacy policies and terms, not as Silent Spell's service providers.

License and trial data

If you activate Multi Rings or use the trial system, Mana may contact license.silent-spell.com. The app may send:

Silent Spell stores only an irreversible hash of the license key, not the plaintext license key. The license key is verified with Gumroad and is not retained by Silent Spell. Device records may include the license hash, device ID, device public key, activation and last-seen timestamps, Mac model identifier, and a country code derived by Cloudflare from the request. Silent Spell does not retain raw IP addresses in its own license and device records; however, infrastructure providers such as Cloudflare may process or temporarily log IP addresses to deliver and secure the service and to prevent abuse, under their own policies.

Apple DeviceCheck tokens are forwarded to Apple to read or update two per-device trial bits. Silent Spell does not store DeviceCheck tokens.

Silent Spell does not use profiling or automated decision-making that produces legal or similarly significant effects in operating Mana.

Purchases

Multi Rings purchases are processed by Gumroad. Gumroad handles payment details, buyer email, receipts, taxes, and payment security under its own policies. Silent Spell does not store credit card numbers.

Updates and downloads

Mana uses Sparkle for automatic updates. The app may check downloads.silent-spell.com for update metadata and downloads. Standard hosting and infrastructure logs may include request metadata such as IP address, user agent, and timestamps.

Website and analytics

The Mana website includes no third-party analytics or tracking scripts. Its hosting provider, Cloudflare, may inject small functional scripts — such as email-address obfuscation that protects the support address from scrapers — which set no cookies and perform no tracking. Like most websites, hosting and infrastructure providers may process request metadata needed to serve the site and protect the service, and Cloudflare may provide aggregate, privacy-preserving traffic and security analytics that do not rely on tracking cookies.

Support communications

If you email support@silent-spell.com, Silent Spell processes the information you send — such as your email address, purchase or order details, and any troubleshooting information — to respond to and resolve your request. This rests on Silent Spell's legitimate interest in providing support and, for purchase issues, on performing the purchase contract. Support messages are kept only as long as needed for support, records, and legal purposes.

Sharing

Silent Spell uses service providers only to operate Mana: Cloudflare for hosting and license infrastructure, Gumroad for purchases and license verification, Apple DeviceCheck for trial enforcement, and the supported AI vendors when Mana requests quota data directly from them. Silent Spell does not sell personal information and does not share it for cross-context behavioral advertising.

Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, Silent Spell processes the limited personal data described above on the following legal bases:

International data transfers

Silent Spell's service providers (including Cloudflare, Apple, and Gumroad) may process data in the United States and other countries. Where personal data is transferred out of the EEA or UK, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the equivalent transfer mechanisms operated by those providers.

Children

Mana is not directed to children, and Silent Spell does not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact support@silent-spell.com and it will be deleted.

Local storage

Mana stores app settings and selected quota rows locally. License keys, device IDs, device signing keys, and trial anchors are stored in your Mac Keychain. Signed license tokens and refresh bookkeeping are stored in Application Support.

Retention

License and device records are kept for the life of the license unless they are no longer needed for operation, abuse prevention, accounting, or legal reasons. Local app data remains on your Mac until you remove it or uninstall/clean up the app data.

Your choices and rights

You can stop using Mana at any time, remove the app, and delete local app data. Depending on where you live, you may also have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to its processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these, or for any privacy, purchase, license, or deletion request, contact support@silent-spell.com. Silent Spell will respond within the timeframe required by applicable law and will not discriminate against you for exercising these rights.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority. If you are a California resident, then to the extent the CCPA/CPRA applies, you may exercise the rights described above; regardless of whether it applies, Silent Spell does not sell or share personal information as those terms are defined under the CCPA, and honors these rights for all users as a matter of practice.

Data security and breaches

Silent Spell takes reasonable measures to protect the limited data it processes and relies on the security of its infrastructure providers. In the event of a personal-data breach affecting you, Silent Spell will notify you and the relevant authorities where required by applicable law.

Changes

Silent Spell may update this policy as Mana changes. The effective date above will be updated when material changes are made.