DATA BOUNDARIES

Your engine. Your data.

This public website

This website is static content hosted on Cloudflare. It has no account sign-up, application analytics scripts, advertising trackers or forms that collect provider credentials. Cloudflare processes requests to deliver and protect the site.

Your engine instance

The engine sends the evidence you submit to its configured model provider when inference is needed. The first provider is Vercel AI Gateway. Review your provider's data handling terms before submitting sensitive information.

Local engine credentials and usage are stored on your computer. A hosted engine keeps its durable state in its owner's deployment. The public website does not receive that engine's API requests.

Engine activity and receipts retain metadata such as connection identity, service, outcome, token counts and latency. The engine does not intentionally retain raw request bodies in the usage ledger. Exact input caching exists in process memory with a configurable lifetime.

Credentials and controls

Consumer keys are stored as hashes. Provider secrets remain server-side; local secret files are permission-restricted, not encrypted at rest. Use scoped credentials, expiration and revocation, and keep the administrator link private.

Client-reported names help display activity but do not establish identity. The credential determines the connection and its limits.