Activity Lab never asks for WakaTime API keys, GitHub tokens, or account passwords. Its optional network feature retrieves only the public WakaTime programming language catalog.

Do not publish secrets or sensitive user data in public issues. Report potential security concerns privately through a secure contact channel listed on the repository maintainer's GitHub profile if one is provided.

Install VSIX files only from trusted releases. Session files are written under a dedicated folder in your home directory and are not connected to your existing development project.

© Albatany 2026