Privacy

Last changed 18 October 2026

Cesura has no analytics, no crash reporting, no account and no ad pixels. This page lists every network request the app makes, and what stays on your Mac.

What Cesura sends

• License check. When you activate a license, and about once a week after that, Cesura sends the license key, the app name and a one-way hash of your Mac’s hardware ID to licensing.cohencool.workers.dev. The hash lets one key work on a set number of Macs. It cannot be turned back into the hardware ID.
• Update check. Cesura asks cesura.dev/appcast.xml if there is a new version. You can turn automatic checks off in Settings. Updates install only if their EdDSA signature and Apple code signature check out.

Cesura’s own requests go through one gate with an allowlist of these hosts. A request to any other host is refused.

What your agents send

Cesura starts the agent CLIs you already use, such as Claude Code and Codex, signed in as you. They talk to their own providers exactly as they do when you run them yourself. Cesura does not see, store or send their sign-in.

• Privacy mode starts agents without your MCP servers, plugins and hooks, so the model provider is the only thing they contact. Servers and the Reason backend are off in privacy mode.
• API keys are optional. They are kept in your Mac’s Keychain and passed only to an agent that runs on that provider’s key.
• Servers you add are reached with your own ssh. The server’s agent uses the server’s own sign-in. No key or sign-in from your Mac goes there.

What stays on your Mac

• The record of your tasks, answers and results, in ~/Library/Application Support/Cesura.
• Voice. Dictation uses Apple’s speech recognizer on your Mac only.
• Routing. The kind and difficulty of each task are read by Apple’s on-device model, or by simple keyword rules when that model is not available.
• Your past sessions. Cesura reads the session files in ~/.claude and ~/.codex on your Mac to find work you can continue. It never uploads them.
• Screenshots and files you attach to a task. They are kept in Cesura’s folder, readable only by you, passed to the one agent you chose by their path, and deleted after a day.
• Notifications. They show the task’s title, in your own words, and whether it needs you or is done. Nothing the agent wrote goes into a notification.
• The support log. Cesura logs event names, ids, models and outcomes to the macOS log, never your prompts, agent text, titles or paths.

Permissions

Cesura works with no macOS permissions. Each one is asked only by the feature that needs it, the first time you use it: the microphone for dictation, Screen Recording for Point at it, Accessibility if you choose the double-tap Option shortcut, and notifications the first time an agent needs you while Cesura is in the background.

Credits

• Type on this site: Inter (SIL Open Font License), Newsreader (SIL Open Font License) and IBM Plex Mono (SIL Open Font License), served from this site.
• Updates in the app: Sparkle, MIT License.
• Night stills, graded for Cesura (gray, one colour curve, grain, crops), each under Creative Commons Attribution 4.0:
  • Horsehead Nebula. NASA, ESA, and the Hubble Heritage Team (AURA/STScI). esahubble.org/images/heic1307a
  • The Eagle has risen: stellar spire in the Eagle Nebula. NASA, ESA, and The Hubble Heritage Team (STScI/AURA). esahubble.org/images/heic0506b
  • Cosmic seahorse. ESA/Webb, NASA & CSA, J. Rigby. esawebb.org/images/potm2303a