The short version

TuneStatus runs on your Mac and stores nothing about you anywhere else. We have no database and no user accounts. The only measurement that exists is anonymous counters (described below) — we couldn't sell your data if we wanted to, because we don't have any.

What the app can see

The TuneStatus app reads two things: the song currently playing in the Spotify app on your Mac (via macOS's built-in automation — no Spotify account access of any kind), and your own Slack status and custom emoji list. It can write one thing: your own Slack status. It cannot read messages, files, channels, or anything about anyone else.

Where your data lives

Your Slack sign-in token and settings are saved in one file on your Mac (~/.tunestatus-mac.json), readable only by your user account. The app talks to slack.com to set your status, and once a day asks tunestatus.com whether a newer version exists (the request carries the app's version number and nothing else). Deleting that file (or clicking “Disconnect Slack” in the app) removes everything.

The sign-in moment

When you click “Sign in with Slack”, your sign-in token is issued by Slack directly to the app on your Mac (using OAuth PKCE). This website only relays a single-use authorization code that is useless without a key that never leaves your machine — your token itself never touches our servers, and we keep no record of who signs in. (Like any website, our hosting provider keeps standard, short-lived infrastructure logs of requests.)

This website

tunestatus.com is a download page. No cookies, and no per-person tracking — only anonymous aggregate counts: page views, downloads, sign-in outcomes, and (for visits and downloads) the referring site's domain such as “slack.com” and your country as reported by our CDN. To tell real visitors from the search-engine bots and link previewers that make up much of the raw traffic, the page loads a 1×1 image from this site once it has rendered, and passes along that same referring domain (never a full URL) — a plain counter with no identifier of any kind attached. These are tallies with nothing that identifies you; no IP addresses or full URLs are stored. Which browser you use is judged from the standard headers your browser already sends, and only the word “browser”, “bot” or “unknown” is recorded. Your theme choice (dark/light) is saved in your own browser and never sent anywhere. One caveat for completeness: the page's fonts load from Google Fonts, so Google receives the standard web request (including your IP address) when the page loads — that's the only third party involved.

Your data, your hands

Since we hold no data about you, there's nothing for us to export or delete — it's all on your own machine already. If this policy ever changes, the date above will change with it.