The short version

We collect only what we need to run the service. We do not read or store your API request and response content. We do not sell your data.

What we collect

• > Email address — collected via Google OAuth when you sign up. Used for account identification and billing notifications.
• > Usage metrics — request counts, latency, error rates, and token usage per API key. Used for billing and rate limiting.
• > IP address — logged at the edge for rate limiting. Not linked to your account beyond rate limit enforcement.

What we do NOT collect

• > API request content (your prompts)
• > API response content (LLM outputs)
• > Personal data you send through the API
• > Behavioral tracking or fingerprinting

Cookies and local storage

We use localStorage to store your session token after login. We do not use tracking cookies, advertising cookies, or third-party cookie networks. No cookie banners needed.

Analytics

We use PostHog for product analytics. Data is collected anonymously — we track page views and feature usage, not individual users. PostHog is configured with IP anonymization enabled.

Where your data is stored

Account data and usage metrics are stored in Cloudflare Workers KV, distributed across Cloudflare edge locations globally. No single data center stores all your data.

Third-party services

We work with the following third parties:

• > Google — OAuth login. Subject to Google's privacy policy.
• > Cloudflare — Hosting, edge compute, and KV storage. Your requests pass through Cloudflare infrastructure.
• > Groq and OpenRouter — LLM providers. Your API prompts and responses pass through their infrastructure to reach the underlying models. Review their privacy policies before sending sensitive data.

GDPR

We collect minimal personally identifiable information. If you are in the EU or EEA, you have the right to access, correct, or delete your data at any time. To exercise these rights, email [email protected].

Data deletion

To delete your account and all associated data, email [email protected] with the subject "Delete my account". We will process your request within 30 days.

Changes to this policy

If we make material changes to how we handle your data, we will notify you by email before the changes take effect.

Contact

Privacy questions: [email protected]