Privacy

Privacy notice

Last updated November 6, 2026

We keep as little as we can. This page lists exactly what that is.

Visiting the website

No analytics, advertising or tracking cookies. Our host, Cloudflare, processes standard request data (such as IP addresses) to serve and protect the site. Your theme choice (light or dark) is saved in your own browser only.

Your account

When you sign in with GitHub we store your GitHub user id, username, display name and primary verified email, the date you joined and whether you have API access. We use your email only to tell you about your account and access. We don't store passwords or your GitHub access token, and we ask GitHub only for your profile and email.

Signing in sets two cookies: a session cookie that keeps you signed in for up to 30 days, and a short-lived cookie (10 minutes) that protects the sign-in step. Both are strictly necessary.

API keys and usage

API keys are shown to you once. We store only a one-way fingerprint (a SHA-256 hash) and the first few characters, so a key can't be recovered from our database. For each key we count requests per minute (deleted after about two hours) and per day (deleted after 90 days), and record when it was last used.

We do not store the content of your API requests or the answers. Requests pass through our gateway to the model server, which computes the answer and keeps no copy. Server logs record the time, endpoint and status code only.

Who processes data

Cloudflare hosts the website, the gateway and the account database. The model server runs on infrastructure we rent; it processes request contents only while computing an answer. We don't sell or share personal data.

Your choices

You can revoke keys and delete your account yourself in the dashboard; that removes your account data, keys, sessions and usage counts. For anything else (a copy of your data, a correction, or a question), email [email protected].