Dipstick

What Dipstick Does

Dipstick is a macOS menu-bar utility that displays usage limits for one or more ChatGPT or Claude accounts. Detailed Codex analytics are available only for a ChatGPT account connected through a Codex credential file. Fourteener Labs, LLC (“we,” “us,” or “our”) does not operate a server for Dipstick and does not receive your provider credentials or usage data.

Dipstick is an independent Fourteener Labs product and is not affiliated with, endorsed by, or sponsored by OpenAI or Anthropic. OpenAI, ChatGPT, Codex, Anthropic, and Claude are trademarks of their respective owners.

Dipstick also includes a clearly labeled Demo mode. Its sanitized sample limits, analytics, and account identity are built into the app. Demo mode does not read a credential file or contact ChatGPT or Claude. Its sample limit history is written only to an isolated temporary directory and removed when you exit the demo.

Account Connections

You can connect ChatGPT through its official website inside Dipstick or by explicitly selecting a local Codex auth.json file. Claude connections use Claude’s official website inside Dipstick. Each web account receives a separate persistent WebKit data store so signing into one account does not replace another account’s session. Provider passwords are entered only into the provider’s page; Dipstick does not create its own password fields or store passwords in preferences.

For a Codex-file connection, macOS stores a security-scoped bookmark so Dipstick can read the selected file later. Dipstick reads:

• the access token and account identifier needed for OpenAI requests;
• the token expiration time; and
• email and plan claims for display within the app.

For a web connection, Dipstick stores the opaque WebKit data-store identifier plus account display metadata such as email, provider account or organization identifier, and plan when available. Cookies and other website data remain in WebKit’s local store. Access tokens used by provider pages are handled transiently inside that authenticated session and are not copied into Dipstick preferences.

Dipstick does not modify a Codex credential file, refresh a Codex token, or transmit a credential to Fourteener Labs. Removing a web account asks WebKit to delete that account’s persistent website data store. Removing any account does not automatically delete its separately stored local history.

Requests to OpenAI and Anthropic

For ChatGPT and Codex-file accounts, Dipstick requests data over HTTPS directly from fixed chatgpt.com usage endpoints. Codex-file accounts can also request detailed analytics. OpenAI may return current rate-limit percentages and reset times, plan details, credit usage, token and activity totals, model and client breakdowns, skill and plugin invocation counts, and code-attribution totals. The information available varies by connection and plan.

For Claude accounts, Dipstick makes same-origin authenticated requests from the account’s isolated web session to claude.ai organization and usage endpoints. Anthropic may return session, weekly, model-specific, reset-time, plan, and available extra-usage information.

These OpenAI endpoints are not public APIs and may change without notice. Dipstick validates supported response fields before displaying them, identifies partial or unavailable data in the app, and keeps account-specific failures separate when you switch accounts.

The Claude usage route is also undocumented and may change without notice. OpenAI and Anthropic process requests under their own terms and privacy policies. Review OpenAI’s Privacy Policy and Anthropic’s Privacy Policy for information about their handling of data.

Information Stored on Your Mac

Dipstick stores current settings, provider and account identity metadata, security-scoped file bookmarks or opaque WebKit data-store identifiers, notification thresholds and selected windows, weekly-digest preference and rollover state, and purchase entitlement state using Apple system storage. WebKit stores each connected web account’s website data locally in its separate persistent store. Dipstick stores samples of usage-limit percentages and timestamps for up to 90 days in versioned SQLite databases. The first account retains the existing database at ~/Library/Application Support/Dipstick/history.sqlite; additional accounts use isolated folders below ~/Library/Application Support/Dipstick/Accounts/. Analytics responses used by the dashboard and optional weekly digest are held in memory and refreshed as needed. Alert and digest text is generated on your Mac and delivered through macOS notifications; it is not sent to Fourteener Labs.

Desktop widgets (added in version 1.1) display usage from a snapshot the app writes into Dipstick’s shared App Group container on your Mac. The widgets read only that local file and make no network requests of their own; the snapshot contains the same account names, plan labels, and limit figures already shown in the menu bar, and it never leaves your Mac. Widgets intentionally show placeholder content in Demo mode.

You can export or clear the active account’s limit history, or reveal that account’s folder from Settings. Clearing history after the confirmation prompt removes samples only from the active account’s SQLite database. When Dipstick imports older JSON history or encounters unreadable history, it preserves the original as a separate local recovery copy and tells you in the app. Clearing active history or removing an account does not automatically delete separate recovery copies or that account’s retained history folder; you can inspect or remove those files through Reveal Data Folder or Finder. Removing the app may not automatically remove its Application Support or preferences files; those can be deleted separately in macOS if desired.

Information We Do Not Collect

Dipstick contains no Fourteener Labs analytics, advertising, crash-reporting, or tracking SDK. We do not receive or sell your:

• OpenAI or Anthropic access token, session cookie, account identifier, email address, organization, or plan;
• usage limits, token counts, skills, plugins, code-attribution totals, or history;
• device identifiers, location, contacts, or browsing activity; or
• payment-card information or Apple Account password.

Purchases and Apple

The optional Pro upgrade is a one-time, non-consumable in-app purchase processed by Apple. Apple provides Dipstick only the StoreKit transaction and entitlement information necessary to unlock Pro. We do not receive your payment-card information. Apple’s handling of purchase data is governed by Apple’s Privacy Policy.

Security

The Mac App Store version uses Apple’s App Sandbox, requests read-only access to any credential file you select, and limits network access to outbound client requests. No method of storage or transmission is completely secure, and possession of an access token, session cookie, or unlocked Mac can permit access to an account. Keep your Mac, credential files, and provider sessions secure and disconnect accounts you no longer use.

Children’s Privacy

Dipstick is not directed to children under 13, and Fourteener Labs does not knowingly collect personal information from children through the app.

Changes to This Policy

We may update this policy as Dipstick changes. The current version will remain posted here with its effective date.

Contact

Questions about Dipstick or this policy can be sent to support@fourteenerlabs.com.