Terms of use

Operator

tokenstat is operated by pueev OÜ (Narva mnt 5, 10117 Tallinn, Estonia). Questions: gyorgy@pueev.com.

The software

The tokenstat CLI, the macOS and Windows desktop apps, and the iOS and Android clients are licensed, not sold, to you, regardless of how you obtain them. Official builds are free to use for any purpose and on as many machines as you like under the tokenstat Source-Available Licence. These service terms do not replace that software licence or the separate licence supplied by an app store.

The source code for everything that runs on your device is published so you can review exactly what it does with your data. The software runs on your device and does not need an account. Local usage collection does not upload conversation text. Network features include update checks, price and catalog refreshes, sign-in, sync, push registration, vault sync, and remote access. Setup enables scheduled updates by default. Agents and workflow steps can also connect to the services you configure.

Coding agents and AI providers

tokenstat provides an IDE and tools for running coding agents on your own computers and connected devices. Third-party coding agents are installed separately when you choose them; an AI provider account or model service is not included with tokenstat. You choose the agents, models, credentials, integrations, and permissions you use.

Those agents and services operate under their own licences, terms, privacy policies, and age requirements. Depending on the tool and your settings, they may send prompts, code, files, and tool results to their providers. Review those policies and obtain any permissions needed for the data you share. tokenstat account eligibility does not override a provider's age requirements. These terms and our privacy notice apply to the software and hosted services we provide, including accounts, sync, and remote access.

Where you get the software

You can install the CLI and the apps from this site, from our GitHub releases, and, when the app is listed there, from the Mac App Store, the App Store, and Google Play. The Windows desktop preview ships only as a setup file in GitHub releases. It is not listed in the Microsoft Store. Only the sources named here are official. A build from anywhere else is not ours. Each distribution platform has its own terms. A free download is not a purchase. GitHub is where the source and the release files live. It is not a payment processor.

Paid plans on this site and in the desktop app are sold through Paddle, on the iOS app through the App Store, and on the Android app through Google Play. A download, from any store or from GitHub, is not a purchase. Paid plans have no free trial. The free plan is the evaluation period: it includes two devices and remote management with a relay allowance. After a charge, purchases are final under the refund policy below.

The iOS and iPadOS apps are additionally licensed under Apple's Standard Licensed Application End User License Agreement. That agreement governs the Apple-distributed app itself. These terms continue to govern the tokenstat account, hosted services, remote relay, and paid plan. If the two conflict about the licensed app, Apple's standard agreement controls for that app.

Preview software

A build marked preview, beta, or review, including the Windows desktop preview, is unfinished software. Features may be missing or behave differently from the finished app, a newer preview may require uninstalling and reinstalling from the latest GitHub release, and a preview may lose or corrupt the local data it touches. Run previews as a second host next to a finished install, never as your only machine, and keep your own backups of anything you care about. Preview software is provided as-is, without warranties of any kind, and the liability section below applies to it in full.

Accounts and profiles

You must be at least 13 to create or use a tokenstat hosted account. When we have no recorded eligibility for your account, we ask for your age group before creating an account or completing sign-in. Returning accounts reuse that declaration; it is not independent age verification. This is our hosted-account minimum; applicable local law and the age rules of your chosen coding agents and AI services still apply. If you are not old enough to enter a binding agreement where you live, your parent or legal guardian must agree to your use of the service. Accounts are not offered to children under 13. Local use of the IDE does not require a tokenstat account. A parent's permission to use the software is not a substitute for verifiable parental consent to an under-13 hosted account; we do not currently offer that account enrolment process.

Signing in creates an account so you can sync usage counters and, if you choose, publish a public profile at tokenstat.ai/your-handle. An account is private until you claim a handle and turn the profile on. You are responsible for what you put on a public page: display name, bio, avatar, and outbound links.

Your data is not sold. See the privacy notice for what is stored.

The hosted account and usage-sync service does not receive your coding conversations, prompts, responses, or source files. Remote content and SSH vault contents are end-to-end encrypted as described below. The service does process readable account, usage, connection, notification, and billing records needed for hosted features and security. Accepting these terms is not blanket consent to additional data processing; the privacy notice explains the purposes and lawful bases. Your chosen agents and providers may process the content you send them under their own terms and privacy policies.

Signing in

Sign-in is handled by a third-party provider: GitHub, Google, X, or Apple. There is no password to create here, because none is received or stored. You authorise tokenstat with the provider you pick, and they tell us only enough to recognise you next time. The account you already have with them stays under their own terms and privacy policy: GitHub terms / privacy, Google terms / privacy, X terms / privacy, Apple terms / privacy.

More than one provider can be linked to the same account, always from settings and from a session you already control. The last one cannot be unlinked, since that would leave the account with no way back in. If a provider you used stops being offered, or you lose access to it, link another one first.

Moderation

A public profile is a page on a domain we operate, so we keep the right to act on what appears there. Content that is abusive, illegal, spam, impersonates someone else, or is otherwise inappropriate may be edited or removed, and the account behind it restricted or suspended. That covers the display name, the handle, the bio, the picture, and outbound links.

It also covers the numbers. Usage counters are meant to reflect what a device did. Deliberately submitting fabricated or inflated figures, including by forging a sync payload, is grounds for resetting the profile or suspending the account, and any leaderboard or aggregate standing derived from it will be removed.

Where it is reasonable, you get notice and a chance to fix it first. Where the content is clearly illegal or is actively harming someone, action comes first. Suspension does not delete your data: export and hard delete stay available from settings. To report a profile, write to tokenstat-abuse@pueev.com.

Copyright notices and repeat infringement

Upload or publish only content you own or have permission to use, including your avatar. We respond to copyright complaints, remove or disable access to infringing content where appropriate, and terminate the accounts of repeat infringers in appropriate circumstances. We accommodate and do not interfere with standard technical measures used to identify or protect copyrighted works.

Send copyright complaints to pueev OÜ, Narva mnt 5, 10117 Tallinn, Estonia, at tokenstat-abuse@pueev.com. Include your physical or electronic signature; identification of the copyrighted work (or a representative list); the exact URLs or other information locating the material you want removed; your name, address, telephone number, and email; a statement that you believe in good faith that the use is not authorised by the copyright owner, its agent, or the law; and a statement that the information is accurate and, under penalty of perjury, that you are authorised to act for the owner of the exclusive right allegedly infringed. Misrepresentations can have legal consequences.

If your material is removed following a DMCA notice, we notify you where possible. To contest a mistaken removal, send a counter-notice to the same contact with your signature; the material and its former location; a statement under penalty of perjury that you believe in good faith it was removed through mistake or misidentification; and your name, address, and telephone number. Include your consent to the jurisdiction of the federal district court for your address, or, if outside the United States, any federal district where the service provider may be found, and your agreement to accept service of process from the complainant or their agent. We forward a valid counter-notice to the complainant. Under the DMCA process, material is restored between 10 and 14 business days after receipt unless we receive notice of a court action seeking to restrain the alleged infringement.

Paid tiers

Plus, Pro, and Elite are optional plans for the hosted profile, extra devices, relay traffic, and, on Elite, the read API. Prices and what each tier includes are on the pricing page (/pricing). A price change may apply at a future renewal after the advance notice and consent required by law and the billing provider. You can cancel before it takes effect. The period already paid is not re-billed. Paying never unlocks anything in the CLI. The desktop app, the mobile client, and every local source, report, and export stay in the free tier. Paid tiers change the hosted profile, relay allowance, and, on Elite, the hosted read API.

Remote management on every plan lets a signed-in phone or computer reach one of your machines. Remote screen viewing and control is an Elite feature. Each connection is end-to-end encrypted and authenticated between those two devices. tokenstat tries a direct connection first. When network conditions do not permit one, the hosted relay forwards ciphertext and cannot read the chats, terminal, screen, files, or keystrokes. End-to-end encryption protects content between those devices. It does not prevent an authorised device or a tool you run on it from accessing that content, and it does not encrypt all local files or hosted account records. You are responsible for who can unlock the devices that hold those keys.

Relay access is for ordinary use of your own machines and is subject to reasonable technical and usage limits so one account cannot exhaust a shared service. Direct connections do not use the hosted relay allowance. tokenstat tries a direct path first. When a relay is needed, all relayed traffic shares one rolling 30-day allowance of 100 MiB on Free, 1 GiB on Plus, 5 GiB on Pro, and 20 GiB on Elite. The window is the current UTC day plus the previous 29 UTC days. Capacity returns as older daily totals leave that window. This is not a daily refill and not a calendar-month reset. Remote screen viewing and control remains an Elite feature, with one relayed screen session per account at a time. A relayed screen session may run for up to ten minutes before reconnecting and may be closed sooner if the viewer disconnects or stops sending its presence signal. The published limits are shared account allowances, not a promise of unlimited relay capacity. Any material reduction will be published before it applies to a new paid period.

SSH vault sync is available on Plus, Pro, and Elite. The vault is end-to-end encrypted: encryption, password unlock, and recovery happen on your devices, and the service stores ciphertext, salts, and encrypted key material, not usable SSH credentials. Unlocking on a signed-in device registers it for vault sync. There is no operator reset if every device able to open the vault and the vault password and recovery code are lost.

The read API is an Elite feature. It returns the counters you have already synced, as JSON or CSV. It cannot write, and it cannot reach another account. The endpoints are listed on the API page (/api).

Web and desktop checkout is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for those orders. Paddle handles checkout, invoices, tax, card data, and payment support. See Paddle's buyer terms and Paddle's privacy policy. Paddle's buyer terms govern that transaction. Paddle does not grant the tokenstat software licence. A paid plan buys time-limited access to the hosted features described here, not ownership of the software. iOS checkout is sold by Apple as an in-app subscription. Apple handles that payment, tax, and the App Store refund process. Android checkout is sold by Google as a Google Play subscription. Google handles that payment, tax, and the Play refund process.

Plans renew on the schedule you picked, monthly or yearly, until cancelled. Cancel a Paddle plan from the receipt they send, from account settings, or by writing to gyorgy@pueev.com or to Paddle support. Cancel an App Store plan from your Apple ID subscriptions, and a Google Play plan from your Google Play subscriptions. Cancelling stops the next charge. Access for the period already paid stays until it ends.

Refunds

Free includes remote management with a limited relay allowance. After a charge, purchases are final. We do not offer refunds for unused time, a change of mind, cancellation, or moving to a lower plan. A downgrade, a cancel, or a switch from yearly to monthly takes effect at the next renewal. You keep the plan you already paid for until that date. Switching from monthly to yearly on the website starts a new year now, with unused monthly time credited. Rights that cannot legally be waived still apply.

We do not offer refunds after a charge. Paddle is the Merchant of Record for web and desktop purchases, Apple is the seller for App Store purchases, and Google is the seller for Google Play purchases. If a store must process a refund under a rule that cannot legally be waived, use that store's process. A refund, where one is legally required and issued, ends the paid plan. Synced data and the account stay unless you delete them. Nothing here limits rights you have that cannot be waived under applicable law, including Estonian, EU, and local consumer-protection law.

If you ask a store for a refund or dispute a charge, the store may ask us about the purchase before it decides, and we answer. Apple is told only whether the plan was delivered and whether we ask it to decline or refund in full. Google gets the activity record for the period in dispute: the days the account was active or signed in, what it used, how many devices were registered, and, for each day, the IP address and country the account was used from. Paddle builds its own dispute file and is not sent this record. Purchases are final under these terms. Where a store asks, we ask it to decline, unless the plan never reached the account, in which case we ask for a full refund. The store decides. There is no setting to switch this off. Starting a dispute is what asks for it.

If a Paddle charge looks wrong, write to gyorgy@pueev.com or contact Paddle through the receipt or at paddle.net. If an App Store charge looks wrong, use Apple's report-a-problem page. If a Google Play charge looks wrong, use Google Play's request-a-refund page.

What you agree not to do

• Scrape or overload the service or other people's profiles.
• Publish illegal content, malware links, or harassment on a profile.
• Impersonate another person or claim a handle to mislead users.
• Submit fabricated or inflated usage figures, or forge a sync payload.
• Attempt to gain unauthorized access to accounts, devices, or the sync API.
• Run more than one account to get around a plan limit or a free tier.
• Use remote reach to access a machine you do not own or control.
• Resell, share, automate, or use the relay as general-purpose bandwidth, hosting, proxy, VPN, or infrastructure.

Availability

tokenstat is a small product, not a guaranteed SLA. Reasonable effort is made to keep it available, but uninterrupted access is not promised. The public site is delivered through Cloudflare. That hop is theirs: see their terms and privacy policy. Sync data can be exported and deleted from settings. The local archive on your device is never on this server.

Hosted data retention

We keep hosted profile data and synced usage history while the account is active. For a Free account, if none of its linked devices has synced for more than 30 consecutive days, we may remove the hosted profile data and synced history associated with it. Paid tiers are not subject to this inactivity removal while the paid plan is active. Your local archive remains on your device and is not affected. Sync at least once every 30 days if you want to keep the hosted copy of a Free account.

Liability

All tokenstat software, the CLI, the macOS and Windows desktop apps, and the iOS and Android clients, is provided as-is and as-available, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Downloading, installing, and using it is at your own risk. To the extent the law allows, neither pueev OÜ nor the software's authors and contributors are liable for any loss from any of that: not for lost data, lost profits, interrupted work, or the cost of replacement software, and not for indirect, incidental, special, or consequential damages, even if such loss was foreseeable. Where liability cannot be excluded, it is limited to what you paid for the hosted plan in the twelve months before the claim, or nothing if you paid nothing. Nothing here limits rights you have that cannot be waived under Estonian or EU law, or liability that cannot be limited by law.

Changes

These terms may be updated. The page here is the current version. A price change may apply at a future renewal after the advance notice and consent required by law and the billing provider. You can cancel before it takes effect.