Last updated October 7, 2026
The contextbox app is made by Elia Hanumatori, an independent developer. For any question about this page or your data, get in touch through hanumatori.com.
Everything you put into contextbox is stored locally and is not encrypted by the app, the same as any other file on your Mac:
~/contextbox.~/Library/Application Support/com.hanumatori.contextbox.~/contextbox/.contextbox/diagnostics.jsonl: up to 128 entries with the time, app version, the workspace folder path and the error message. It helps you or us understand a problem if you choose to share it. The app never uploads it.~/Library/Caches/com.hanumatori.contextbox.usage.json in the same Application Support folder. Delete the file and the app makes a new number.We can't see any of this. To remove everything, delete these folders along with the app. Deleted sections go to the macOS Trash first.
When a box shows a link, contextbox connects straight to that website to fetch its icon: it reads the start of the home page and, if needed, /favicon.ico. That website sees your IP address and a request for its home page, but not the full link you saved. We don't use a third-party icon service, and the app never contacts addresses on your local network.
The app does not talk to any AI service. If you give an AI tool, such as Claude Code or Cursor, the path to a box, that tool reads the files itself, under its own privacy policy.
To know how many people actually use the beta, the app sends one event a day, the first time you open or return to the app that day, to PostHog, an analytics service, on its servers in the EU. The event says only “the app was opened”, with a random install number made on your Mac and the app version. It carries no account, no name, none of your boxes, notes or file paths, and nothing about what you do in the app. PostHog does not create a profile of you, and our PostHog project discards the IP address after estimating an approximate country and city from it. Development builds never send it. If the app can't reach PostHog, it skips that day and keeps no backlog.
When it starts, and once a day while it's open, the app asks this website whether a newer version exists. That request reaches Cloudflare, which hosts the site, with your IP address and the technical details of the request, such as the updater's user agent. It carries no account, none of your boxes or notes, and not the version you have installed. If you choose Update, the app downloads the new version from the same website and checks its signature before installing it. Development builds never check.
When you download the app yourself, the file is served from this website, so Cloudflare receives your IP address, as with any download.
This site is hosted on Cloudflare. To deliver pages and keep the site secure, Cloudflare processes your IP address and browser details in its server logs, as described in Cloudflare's privacy policy. We rely on our legitimate interest in running the site (GDPR Art. 6(1)(f)) and don't use these logs to identify anyone. Fonts are served from this site, not from Google. There are no cookies or trackers. When you click Download for Mac, the page sends one anonymous count to PostHog in the EU: a random number made for that click, nothing that identifies you. The IP address is discarded the same way as for the app. The app shown on the home page is a demo that runs entirely in your browser with made-up data.
Because the app keeps your data on your Mac, you are in full control of it. For anything related to this website, you can ask us what we hold about you, or ask us to delete it. You also have the right to complain to your data protection authority. We don't sell or share personal data.
The contextbox app is in beta. If it ever starts sending anything new, such as crash reports, we'll update this page first and change the date at the top. Update checks and the anonymous usage count were added this way on October 6, 2026.