tracker-mcp is free, open-source software that runs on your own computer. It connects an AI assistant of your choice to the spreadsheet where you track job applications. This policy explains what data tracker-mcp accesses, how it uses and stores that data, and how you can remove it. It applies to the tracker-mcp program, its Claude plugin and its Claude Desktop extension.
In short: tracker-mcp has no servers and no telemetry. The developer never receives, sees or stores your data. Everything tracker-mcp reads stays between your computer, the spreadsheet you chose, and the AI assistant you asked.
Data tracker-mcp accesses
A tracker file on your computer
If your tracker is an Excel (.xlsx) or CSV file, tracker-mcp reads and, after your
confirmation, writes that file. Next to it, it keeps a small configuration file describing your
columns and statuses, and a backups-tracker-mcp folder with copies taken before
each change and a log of changes. Nothing is sent over the network.
Google user data
If your tracker is in Google Sheets and you sign in with
tracker-mcp auth google, tracker-mcp asks Google for a single permission, the
https://www.googleapis.com/auth/drive.file scope: access only to the Google Drive
files you choose in Google's file picker (or that tracker-mcp creates). With it, tracker-mcp:
- reads the cell values, formulas, number formats and dropdown lists of the spreadsheet you picked, to answer your questions about your applications;
- writes cells in that spreadsheet, only after you confirm the exact change, for example a new row, a status or a follow-up date; it then reads the changed cells back to check the write.
tracker-mcp does not access your other Drive files, Gmail, contacts, calendar, or your profile, name or e-mail address.
How the data is used
Data from your tracker is used only to provide the features you ask for: answering your questions about your applications, listing follow-ups and inactive applications, computing your funnel, and making the changes you approve. tracker-mcp passes the results to the AI assistant (MCP client) you connected it to and run it from, because that is how it answers you. What the assistant and its model provider do with that information is governed by their own terms and privacy policy, for example Anthropic's for Claude.
tracker-mcp does not use your data for advertising, does not sell or rent it, does not share it with data brokers, and does not use it to develop, improve or train artificial intelligence or machine-learning models. No person, including the developer, reads your data.
tracker-mcp's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and security
- Google sign-in: a refresh token is stored on your computer in
~/.tracker-mcp/google-token.json, readable only by your user account on macOS and Linux. It is never sent anywhere except to Google to obtain access. - Backups: before each change to a Google Sheet, the old and new values of the
cells it touches are saved in
~/.tracker-mcp/backups/on your computer, so that the change can be undone. - In transit: tracker-mcp talks to Google only over HTTPS, directly from your computer.
The developer operates no server and has no copy of any of this data.
Sharing
tracker-mcp does not share your data with anyone. The only places it goes are the ones you set up: your spreadsheet (on your computer or in your Google account) and the AI assistant you use tracker-mcp with.
Retention and deletion
Data stays on your computer for as long as you keep it. To remove everything tracker-mcp
has stored, delete the ~/.tracker-mcp folder and the backups-tracker-mcp
folder next to your tracker file. To withdraw tracker-mcp's access to your Google account,
remove it at myaccount.google.com/permissions;
the saved sign-in then stops working.
Children
tracker-mcp is a tool for job seekers and is not directed at children under 13.
Changes to this policy
Changes are published on this page with a new effective date; the history of every change is in the project's public repository.
Contact
tracker-mcp is developed by Ivan Rykov. Questions about this policy: open an issue on GitHub. To report a security problem privately, see SECURITY.md.