SessionPal
Back

Nothing leaves this disk.

Audit source

Zero telemetry

  • No accounts, cloud sync, analytics, or crash reporting.
  • Optional signed update checks on GitHub Releases (disable in Settings → General).
  • Daily models.dev rate fetch sends zero session data; offline fallback bundled.

Read-only SQLite

  • Cursor: state.vscdb opened read-only; backups extract chat rows only—never auth tokens.
  • OpenCode: opencode.db read-only; account & credential tables excluded from ZIPs.
  • Antigravity: Read-only SQLite; encrypted .pb files untouched.

Staged restores & Trash

  • Symlinks and .. escapes rejected.
  • Archives stage in a temp folder first and write back only missing JSONL files—never overwriting live sessions.
  • Deletions move files to macOS Trash or Windows Recycle Bin.

Local FTS & permissions

  • search-index.db stays in your local cache folder and skips noisy tool stdout.
  • Asks before accessing protected macOS folders (.git / package.json repo grouping only).

Known boundaries

  • • Unofficial agent formats; unknown fields are ignored safely.
  • • Missing token metadata is shown as unknown, never guessed.
  • • Session-level DB totals plot on the session’s last-active day.
  • • Independent tool; unaffiliated with agent vendors.