Your chats, credits and settings live only in this browser, encrypted. Nothing is stored on our server unless you turn on auto-backup, which stores an encrypted copy we cannot read.
Before a message is sent to an AI model, our server replaces names, wallet addresses, emails, phone numbers, places and secrets with placeholders such as [PERSON_1], along with ID numbers the detection model recognises (such as US Social Security, passport and driver's licence numbers). The model never sees them; your browser shows the real values in the reply. Each reply has a “What the model saw” view.
Our server sees your message while it processes it, keeps it only in memory, and never logs it. We route only to model providers with zero data retention through OpenRouter.
Credits are blind-signed tokens. When you pay, the server signs tokens it cannot see, so it cannot link your later chats to your wallet. Within one browsing session your messages are linked to one anonymous balance; a new session starts every time the app opens.
Limits you should know
Detection is automatic and can miss things. Names written in non-Latin scripts are often not detected; use Full mode or remove them yourself. Other ID formats, such as many national ID numbers, may be missed; remove them yourself.
Your deposit transaction is public on Solana, like any blockchain payment.
Our hosting provider and, if enabled, Cloudflare can see your IP address when you connect.
If you clear this browser's data without a recovery file or auto-backup, your credits are gone.
Credits and licences
PII detection uses Rampart by National Design Studio, licensed under CC BY 4.0.