The phrase “local theme tool” is easy to misread as “never connects to the internet.” A more accurate description of Paletide is that image import, theme storage, and visual analysis happen on the current Mac, while initial activation and periodic renewal of a commercial license require a connection to the licensing service. Separating those two areas makes it possible to understand which data the software actually handles.
Paletide is an independent third-party tool and is not an official OpenAI product. It does not modify the official .app, app.asar, code signature, API Key, or Base URL, and it does not take control of an OpenAI account. Network traffic and data processing performed by the official Codex and ChatGPT desktop apps remain governed by their provider’s terms and privacy policy. They are outside Paletide’s processing scope.
Where custom images are stored
The home hero, home background, and task-page background imported by a user are stored in the Application Support directory on the current Mac. For compatibility with earlier versions, the directory may retain the historical name ~/Library/Application Support/CodexDreamSkinStudio. Custom themes in the theme library also remain on the device and are not uploaded as part of license validation.
Paletide downsamples artwork locally to estimate brightness, accent color, visual focus, left and right safe areas, and aspect ratio. Those results support previews and fitting suggestions; the analysis does not require sending the image to a cloud service. Cropping does not rewrite the source file either. Paletide stores focal coordinates and uses them to fit the image to different window ratios.
Rights to custom artwork still belong to its creator. Users should import only work they created, licensed, or otherwise have the right to use. Local storage does not automatically grant permission for public distribution or commercial redistribution.
What license validation sends
During initial activation and later renewals, Paletide sends the license code, an anonymous installation ID, the product ID, the app version, and a newly generated random nonce to the licensing service over HTTPS. As with an ordinary HTTPS website, the server can also see the connecting IP address. The anonymous installation ID is a stable pseudonymous identifier used to recognize the same Mac; it is not the raw hardware UUID.
The license code is stored in the macOS Keychain. After successful validation, the service returns a signed lease that can be cached locally. While Paletide is running, it attempts to renew the lease about every 15 minutes. The cache supports up to 48 hours of offline use, without extending beyond the license’s own expiration date. Once the offline window has elapsed, the app must reconnect to validate the license.
These license requests do not read or upload theme artwork, custom theme content, Codex conversations, Codex account information, API keys, auth.json, or config.toml. Paletide does not require a separate user account and does not include advertising, behavior analytics, or telemetry.
Choosing “Remove License” on the Mac clears the license information from that Mac’s Keychain only. It does not automatically release the device slot on the licensing server. Before moving to a different computer, contact the seller to release the old device so that activation on the new Mac does not exceed the licensed device count.
What a local loopback connection means
Paletide applies themes through a CDP debugging connection whose listening address is restricted to 127.0.0.1. The port is not directly exposed to the local network or the internet. Paletide also verifies that its target is a supported official desktop app and applies the theme only to expected app pages. This design avoids changing the official binary or signature and makes pausing and restoration possible.
A loopback address is not the same as zero risk, however. CDP itself is powerful, and malicious software running on the same Mac could still try to access a local port. Do not run untrusted local programs while a theme session is active. When you no longer need the theme, choose “Restore Official Appearance” to stop the themed session and reopen the official app normally. “Pause” removes the current theme, but the debugging port may remain available until the official app exits.
What a diagnostic report contains
When a problem occurs, Paletide can generate a diagnostic report limited to troubleshooting data such as the app and component versions, macOS version, runtime state, and license status. By design, it does not contain the full license code, device ID, theme images, API keys, full user paths, account configuration, or complete process commands. A report is exported only after the user actively chooses a destination. It is still good practice to review the file before sending it to anyone.
Privacy checks users can perform
Download releases from the official page linked by the Paletide website and verify the version information. Import only local images with clear usage rights. Never put a complete license code in a public issue or screenshot. Review a diagnostic report before sharing it, and end theme sessions you no longer use. On a company-managed Mac, also follow the organization’s policy for debugging ports and third-party applications.
Privacy cannot be summarized accurately with the phrase “everything is local.” Paletide keeps visual content on the Mac, limits network use to license validation, and states the capabilities and constraints of its loopback debugging connection. With those boundaries visible, users can decide whether the tool fits their environment.