Privacy
In short: this site collects nothing, and the apps send nothing without you doing something first.
Updated on 17 October 2026
This site
- No cookies, no analytics, no advertising, no forms.
- Fonts and images are served by the site itself: your visit triggers no request to a third party.
- The language is picked from your browser’s settings; your choice is stored nowhere.
- The host, Vercel Inc., receives, like any web server, the IP address and technical headers of each request, to serve the pages and protect the service, and handles them under its own privacy policy. The site adds nothing to that.
The apps
- No account to create, no telemetry, no background updates.
- Your passwords and API keys are in the system’s keychain, never in a file.
- The AI assistant is off by default. Once on, it uses the provider you choose; with a local model, nothing leaves your computer.
- The apps have no server of their own: nothing goes through us.
| To | What is sent | When |
|---|
| Your databases and SSH servers | Your queries, directly, with no middleman | When you connect |
|---|
| Anthropic (Claude API) | Your message, and what the connection’s AI access allows (schema, results) | If you turn the assistant on with Claude and your key |
|---|
| Your computer only | Ollama, LM Studio and Apple’s model answer without anything leaving | With a local model |
|---|
| Claude Code | The claude installed on your machine, with its own sign-in | If you turn this experimental engine on |
|---|
| Hugging Face | The download of a Whisper model; nothing about you or your databases | On your click, once |
|---|
| Apple | The dictated audio, with the “online” variant of Apple’s recogniser | Only if you choose it |
|---|
| No one else | No telemetry, no account, no background updates | Never |
|---|
| To | What is sent | When |
|---|
| Your files | Read and written on your disk: only the ones you open | As you work |
|---|
| Anthropic (Claude API) | The text you hand to the assistant, and nothing else | If you turn the assistant on with Claude and your key |
|---|
| Your computer only | Ollama, LM Studio and Apple’s model answer without anything leaving | With a local model |
|---|
| Claude Code | The claude installed on your machine, with its own sign-in | If you turn this experimental engine on |
|---|
| Hugging Face | The download of a Whisper model; nothing about you or your files | On your click, once |
|---|
| Apple | The dictated audio, with the “online” variant of Apple’s recogniser | Only if you choose it |
|---|
| No one else | No telemetry, no account, no background updates | Never |
|---|
| To | What is sent | When |
|---|
| Your remotes | What you push and fetch, through your system’s git | When you ask (or every 5 to 30 minutes, if you turn background fetch on) |
|---|
| Anthropic (Claude API) | Your message, the repository’s state and what its tools read (commits, diffs) | If you turn the assistant on with Claude and your key |
|---|
| Claude Code | The claude installed on your machine, with its own sign-in and your Claude plan | If you choose it as the engine |
|---|
| Your computer only | Ollama, LM Studio and Apple’s model answer without anything leaving | With a local model |
|---|
| No one else | No telemetry, no account, no background updates | Never |
|---|
| To | What is sent | When |
|---|
| Your mail servers | IMAP and SMTP, over TLS, certificates checked; your password stays in the keychain | To fetch and send |
|---|
| Your computer only | The kept mail (one database per account, readable by you only), your categories and filters; Apple’s model, Ollama and LM Studio answer without anything leaving | By default |
|---|
| Anthropic (Claude API) | Your request and the messages it concerns (an open message is cut at 8,000 characters) | Only for an account that allows a cloud model, with Claude and your key |
|---|
| Claude Code | The claude installed on your machine, with its own sign-in and your Claude plan | Only for an account that allows a cloud model, if you choose it |
|---|
| Mozilla’s directory, the domain’s website and DNS | Only the address’s domain, never the address: over HTTPS to autoconfig.thunderbird.net and the domain’s web servers, and as DNS queries, to find its servers | When you add an account on a domain Plume does not know |
|---|
| The account’s chosen model | The start of each message that arrives while Plume is open and passes the rules without AI, with your instructions, to decide whether to reply | Only with automatic replies turned on, and following the account’s AI access (your computer’s models, or a cloud model too) |
|---|
| People who write to you | An automatic reply in plain text, to the sender only, after its wait in the outbox | Only if you turn automatic replies on for that account (off by default) |
|---|
| Senders | Loading remote images, which tells them the message was opened | Only if you show them |
|---|
| No one else | No telemetry, no account, no background updates | Never |
|---|
AI providers
- Anthropic (Claude)
- With your own API key, kept in the keychain. What you send is handled under Anthropic’s terms for its API.
- Claude Code
- With your Claude plan, no API key: the app runs the claude installed on your machine, which uses its own sign-in. Off by default. It gets no terminal, no files, no web: in Ask mode it receives no tool at all, and the app stops it at once if it tries to use one.
- Local models
- Apple’s model runs on the Mac (with Apple Intelligence), in all four apps; Ollama and LM Studio are only reached on your own machine. Nothing leaves.
Your rights
This site keeps no personal data about you, so there is nothing to access, correct or erase. For a complaint, you may contact the French data protection authority, the CNIL (cnil.fr).
Ardoise DB
Craie Text
Cahier Git
Plume Mail