What this site knows about you
This site lets you sign in with a passkey and reach the AI that runs on your own PC. It is a doorway, not a library.
What it stores
- Your passkey public keys (a public key cannot sign you in; the private part stays on your device).
- The list of your PCs: the name you gave each one, when it was added, when it was last seen, and its device public key.
- Hashes of your recovery codes (the codes themselves are shown once and not kept).
- An optional label you may type for your account.
- A sign-in session (a random id) while you are signed in, for up to 7 days of use.
What it never stores or sees
- It never sees your chats. Messages are encrypted between your browser and your PC. The site only passes along scrambled bytes.
- No email, no password, no real name, no phone number.
- No IP address is kept. To slow down guessing, it keeps a one-way scrambled form of your address for at most an hour, then deletes it.
Third parties
Creating an account asks Cloudflare Turnstile to check that you are a person. The site runs on Cloudflare, which sees ordinary web traffic the way any host does.
Delete everything
Account page, "Delete my account", removes your passkeys, PCs and codes at once.
One honest limit
This site also delivers the web page you type in. If the site itself were hacked, a changed page could read what you type. Encryption protects you from a nosy relay, a leaked log or a leaked database, not from a hacked website. Keep the PC-side approval switch on for browsers you do not recognise.