Privacy

Last updated 28 August 2026

stillpane has no account, no sign-in, and no capture server. It runs on your Mac and writes captures to a folder there. The one moment content leaves your machine is when you attach a capture to a message, and that page explains exactly what happens then.

What a capture contains

When you press both Option keys, stillpane writes two things:

• A screenshot of the active window, if you granted Screen Recording.
• The window's text, read through the macOS accessibility APIs and rendered as markdown.

Holding Shift captures only the text, with no screenshot taken at all.

The text side is whatever the app exposes to assistive technology, which is usually more than what your eyes landed on. It can include content further down a page you never scrolled to, text inside collapsed sections, and the contents of fields that happen to be on screen. Treat a capture as everything the window could tell a screen reader.

Where captures are stored

Each capture goes into its own folder under ~/.claude/stillpane/, readable only by your user account. Taking a capture uploads nothing. The files sit on disk until you attach one or until they are pruned.

Captures older than 24 hours are deleted, either while the app is running or at its next launch. Uninstalling removes the directory outright.

When you attach a capture

This is the part that leaves your Mac, and it is the entire purpose of the app.

So the practical rule is the one you already use for anything you paste into a chat. If a window is showing something you would not send to your model provider, do not attach it.

What the app sends on its own

One request. Once a day the app checks whether a newer version has been released, identifying itself by nothing more than its own version number.

There is no account, no device identifier, no install identifier, no usage reporting and no crash reporting. The app never uploads a capture, and on its own it makes no other network request.

One setup press can download: installing the plugin on a Mac that lacks the claude command fetches Claude Code's command line tool from Anthropic's download service, verified against Anthropic's published checksum before it runs, and Anthropic's tool then fetches the plugin from GitHub. That happens only when you press Install Plugin, and nothing about you or your Mac rides along.

Permissions the app asks for

Accessibility

Required. This is what lets stillpane read another window's text. macOS offers no narrower permission for it, which is also why the app is open source: the grant is broad, so the code that uses it should be readable.

Screen Recording

Optional, and used only to take the screenshot. Skip it during setup and captures are text only, with no further prompting. Grant it later in System Settings and screenshots start working with no other action.

Both are granted by you in System Settings and can be revoked there at any time.

What this website records

No cookies, no third-party tags. The page loads nothing from anyone else's server, and nothing it records is shared with anyone. Traffic is counted by the site's own server as it answers each request.

To count visitors rather than requests, your IP address and browser string are hashed with a rotating secret. Only the fingerprint is stored. No IP address, no cookie. The page also reports how far it was read and whether the demo was used.

Removing everything

Uninstall stillpane from its menu bar item. It removes the plugin and marketplace entry from Claude Code, deletes the captures directory, resets the permission grants, clears the app's preferences, unregisters the login item and moves the app to the Trash. Anything it cannot undo, it tells you about so you can finish by hand.

Questions

Email hello@stillpane.dev. For anything security-sensitive, follow SECURITY.md in the repository rather than opening a public issue.