In short
- Each extension runs on your Mac and talks only to the service it connects to (for example WhatsApp, Gmail or Notion).
- Your sign-ins, messages and files are processed and stored on your Mac. Nothing is sent to the author of these extensions, and there is no analytics, telemetry, tracking or advertising.
- What Claude reads through an extension becomes part of your Claude conversation and is handled by Anthropic under its own privacy policy, like anything else you share with Claude.
- You stay in control: delete the local folders listed below, uninstall the extension, and revoke its access at the service.
Who this policy is from
These extensions are open-source software written by an individual developer and published at github.com/ClementWalter. They are not made or endorsed by Anthropic or by the services they connect to. The author operates no server for them and receives no data from them.
How the extensions work
An extension is a small program that Claude Desktop runs on your Mac. When you ask Claude something, Claude calls one of the extension's tools; the extension fetches the answer from the service, on your Mac, with your own account, and hands the result back to Claude. Anything that sends, changes or deletes something asks for your confirmation first.
On install, Claude Desktop downloads Python and the extension's open-source libraries from the Python Package Index and Python's build mirrors. Those downloads contain no personal data.
What each extension accesses, and which service it talks to
iMessage
Reads the Messages history of your Mac (~/Library/Messages/chat.db) and your Contacts names; sends messages you confirm through the Messages app. Talks to no online service itself: sending goes through Apple's Messages app. The optional iMessage Reader helper keeps a private copy of the message database in ~/Library/Application Support/imessage-cli and is installed at ~/Applications/iMessage Reader.app.
Links to your WhatsApp account as a linked device, then receives, decrypts and stores your messages, contacts' names and group details on your Mac; sends the messages and files you ask it to. Talks only to WhatsApp's servers. Stores its keys in ~/.config/whatsapp-cli and messages and media in ~/.cache/whatsapp-cli.
Telegram
Signs in to your Telegram account as a linked device with the API id and hash you create, then reads chats, folders, messages and attachments, and sends what you confirm. Talks only to Telegram's servers. Stores its session and settings in ~/.config/tg-cli and caches in ~/.cache/tg-cli.
Reads, searches and saves your email and attachments, and writes the drafts, replies and messages you confirm. With Gmail it talks only to Google (accounts.google.com and the Gmail API) through a Google Cloud project you own; with the Mac's Mail app it goes through Mail, which talks to your own mail providers. Stores sign-in tokens and settings in ~/.config/email-cli; attachments go to the folder you choose.
Google Drive
Searches your Drive and reads Docs, Sheets and PDFs; writes to the spreadsheets you ask it to. Talks only to Google (the Drive, Docs and Sheets APIs) through a Google Cloud project you own. Stores sign-in tokens and settings in ~/.config/gdrive-cli.
Notion
Copies your notion.so session from your browser, then reads and searches the pages, databases and comments your account can see, and makes the edits you confirm. Talks only to Notion. Stores the session and settings in ~/.config/notion-cli; exports go to ~/Downloads/Notion.
Deezer
Searches Deezer's public catalogue; with your browser's Deezer session (or the cookie you paste), reads your likes, playlists, Flow and listening history and makes the changes you confirm. Talks only to Deezer. Stores settings in ~/.config/deezer-cli and caches in ~/.cache/deezer-cli.
Cafeyn, Franc-Tireur and miLibris kiosks
Use your browser's session on the reading site to read the issues and articles your subscription gives you, and save PDFs, page images and text you ask for. Each talks only to its own site: cafeyn.co, franc-tireur.fr (and its miLibris kiosk), or the miLibris kiosk you read and miLibris' content servers. They store settings in ~/.config/cafeyn-cli and ~/.config/milibris-cli, and files in ~/Downloads/cafeyn, ~/Downloads/franc-tireur and ~/Downloads/milibris.
EcoleDirecte
Signs in with the EcoleDirecte username and password you type in a page served on your own Mac, then reads grades, homework, timetable and school messages, and sends the messages you confirm. Talks only to EcoleDirecte. Stores the sign-in and session in ~/.config/ecoledirecte-cli.
MyOralia
Copies your myoralia.fr session from Chrome, then reads your co-owner space (building, statement, meetings, contacts, documents) and saves the PDFs you ask for. Talks only to MyOralia. Stores the session in ~/.config/myoralia-cli, caches in ~/.cache/myoralia-cli, and documents in ~/Downloads/MyOralia (or the folder you choose).
RentalReady
Uses your browser's session on pms.rentalready.io to read your owner space: property, reservations and their financial breakdown. Talks only to RentalReady. Stores settings in ~/.config/rentalready-cli and caches in ~/.cache/rentalready-cli.
Merkl
Reads public campaign data from Merkl's API (api.merkl.xyz). If you fill the optional settings, it also reads public blockchain data from the Ethereum RPC provider you chose, and sends your Merkl API key to Merkl only. Stores settings in ~/.config/merkl-cli.
OpenZeppelin Audits
Uses your Chrome session on audits.openzeppelin.com to read your project's audit reports and to submit or remove the responses you confirm. Talks only to audits.openzeppelin.com. Stores settings in ~/.config/oz-audits.
Browser sessions
Extensions that reuse a website login read that one site's cookie from your browser's cookie store on your Mac. macOS asks you once to allow access to the browser's "Safe Storage" keychain item. They do not read other sites' cookies, your passwords or your browsing history.
Shared by all extensions
The tool list of each extension is cached in ~/.cache/mcp-bridge. Settings you type in Claude Desktop are kept by Claude Desktop, with fields marked as secret stored in the macOS keychain.
What is not collected
The extensions contain no analytics, crash reporting, telemetry, advertising or tracking, and send nothing to the author or to any party other than the service each one connects to. This website uses no cookies, scripts or third-party resources.
Retention
Local data stays on your Mac until you delete it. Uninstalling an extension in Claude Desktop removes the program and its settings; to remove the data too, delete the folders listed above for that extension. Data held by the services themselves (your WhatsApp messages, your Gmail, your Notion pages...) is governed by their own policies; Claude conversations by Anthropic's.
Revoking access
- WhatsApp: on your phone, WhatsApp, Settings, Linked devices, then log out the device.
- Telegram: Telegram, Settings, Devices, then terminate the session. You can also delete the app at my.telegram.org.
- Gmail and Google Drive: remove the app at myaccount.google.com/connections, or delete your Google Cloud project.
- iMessage: switch off iMessage Reader in System Settings, Privacy & Security, Full Disk Access, and Claude Desktop's access to Messages under Automation.
- Sites used through your browser login (Notion, Deezer, Cafeyn, Franc-Tireur, miLibris kiosks, MyOralia, RentalReady, OpenZeppelin Audits) and EcoleDirecte: sign out of the site, or sign out of all devices from its account settings; this ends the session the extension uses. Delete the extension's
~/.configfolder to remove its copy.
Children
The extensions are meant for adults using their own accounts, and are not directed at children. The EcoleDirecte extension lets a parent read their child's school information that the school already shares with that parent's account; that information stays on the parent's Mac as described above.
Security
Sign-in files are written readable only by your macOS user. Anyone with access to your Mac user account could read them, as they could your browser's data: protect your Mac with a password and FileVault.
Changes to this policy
Changes are published on this page with a new effective date. The full history is public in the repository.
Contact
Questions and requests: open an issue at github.com/ClementWalter/claude-extensions/issues. Please do not post personal data there: issues are public.