Carrier

Privacy

Draft, Oct 25, 2026. Covers Carrier v1, which has no accounts and no backend.

Carrier runs on your computer and sends nothing anywhere. It has no account, no analytics, no crash reporting, and no update check that carries your data. The coding tools Carrier opens (Claude Code, Codex, Cursor, OpenCode, Antigravity, Copilot) talk to their own services as they always do. Carrier is not part of that traffic.

What Carrier never stores

  • Your prompts.
  • Transcripts or agent output.

The hook that reports a session’s start, prompts, and end (carrier-hook) drops prompt text before it writes anything. It keeps only ids, the working folder, the transcript path, the start or end reason, and a timestamp.

What Carrier stores

In its own app data folder (~/Library/Application Support/com.carrier.app on Mac, %APPDATA%\com.carrier.app on Windows):

  • A SQLite database of your projects, repos, sessions, runs, and notes. For a repo it keeps the folder path, the branch, the commit, and the git origin URL with any username or password removed.
  • Session names and prompt counts. Some tools name a session from your first prompt. Carrier shows the name the tool gives it.
  • inbox/: short-lived event files from carrier-hook, deleted once applied.
  • launch/: short-lived launch scripts on Mac, which delete themselves.
  • bin/carrier-hook, claude-hooks.json, and opencode/plugins/carrier.js, which the tools run to report in.
  • A log file in the app log folder, with ids and paths only.

In each project’s notes folder, which you choose:

  • timeline.md: one line per session event (started, cleared, exited, moved, filed, deleted). No prompts.
  • .carrier.json: the project’s id, name, and color.

What Carrier reads

  • Git: the branch, the commit, and the origin URL of a repo you add. Carrier never fetches or pushes.
  • Each tool’s own local session store, to match a session to its name and count your prompts: ~/.claude, the Claude app’s session files, the Codex session index, Cursor’s chats and app store, the OpenCode, Antigravity, and Copilot stores. Carrier reads names, ids, and counts. It does not copy message text.
  • Folders you add as sources, to list the git repos or notes folders inside them.

Files outside Carrier’s folders

Only after you agree, Carrier adds its own entry to ~/.claude/settings.json, ~/.cursor/hooks.json, and ~/.gemini/config/hooks.json, and writes ~/.copilot/hooks/carrier.json. Your own entries stay as they are. Carrier never edits ~/.codex. Settings > Remove all hooks takes every Carrier entry out. Do that before you delete Carrier.

This website

If you join the Carrier Pro waitlist, the website saves your email address and the time you joined, in a database on Cloudflare. Nothing else is saved with it: no IP address and no browser details. It is used only to email you when Pro opens. To be taken off the list, write to hello@getcarrier.dev.

Deleting your data

Remove all hooks in Settings, quit Carrier, then delete the app and its app data folder. Your notes folders are yours, and Carrier leaves them where they are.