Privacy
What we keep: almost nothing.
The short version
- ✓ No account. You don't give us an email, a name or a phone number.
- ✓ Your conversation lives only in this browser tab's memory. Not in localStorage, not in a cookie, not on our server. Burn, reload or close the tab and it's gone.
- ✓ Our server does not store or log what you write or what the AI answers. It passes your message to the model and streams the answer back.
- ✓ Ghost links are encrypted in your browser. We hold ciphertext we can't read, deleted on first open or after 24 hours.
What we can't promise: to answer you, a model has to read your message. It goes to our model provider (OpenRouter) and to the company hosting the model. They don't keep it (details below). But “nobody ever sees anything” would be false, so we don't say it.
Three things we can say plainly
- The AI provider never sees your IP address. Requests to the model come from our server, not from your device, and we don't forward your IP.
- Your wallet is never attached to your messages. Signing in only proves you hold $AMNESIA; the address is used to count your daily quota, not stored with anything you write.
- Secrets are caught before they leave. If you paste something that looks like a recovery phrase or a private key, the page stops it in your browser: nothing is sent.
What you still have to trust
That we run the code we describe on /proof, and that OpenRouter and the model host honor zero data retention as they contractually say. Privacy tools that claim you need to trust no one usually rely on special hardware (secure enclaves) — we don't, and we won't pretend otherwise.
What happens when you send a message
- Your browser sends the conversation so far to our server over HTTPS (the model needs the context; our server keeps none of it between messages).
- Our server adds 1 to today's message counter for your device (see below), then forwards the conversation to the model provider.
- The answer streams back through our server to your tab. Nothing is written to disk or to a log on the way.
The model provider: OpenRouter
Your messages go to OpenRouter, which forwards them to a model host. Every request we send sets zdr: true, so OpenRouter may only route it to endpoints with a Zero Data Retention policy (the host does not store it), and data_collection: "deny".
- OpenRouter says it does not store prompts or responses unless the account opts into logging. Ours does not.
- OpenRouter does store request metadata (token counts, latency) and says it samples a small number of prompts for categorization, stored anonymously and classified by a zero-retention model.
- OpenRouter treats short in-memory prompt caching at the host as not being retention.
- The model host still processes your message to answer it, under its own terms and safety rules.
OpenRouter — Zero Data Retention ↗OpenRouter — Data collection ↗OpenRouter — Privacy policy ↗
Current model: mistralai/mistral-small-3.2-24b-instruct.
What our server does store
Hosting
The site runs on Vercel. Like any host, Vercel records basic request data (time, page, status code, and network data such as your IP address) for operations and security, under its own policy. Our code never prints message content, so it is not in those logs. Vercel privacy policy ↗
No analytics, no ad trackers, no third-party scripts on this site.
Private, not uncensored
Privacy is about what's kept, not about what's allowed. The model provider's safety rules apply, and AMNESIA refuses illegal or harmful requests. No image or video generation.
Things only you control
- Your device: screenshots, browser extensions, keyboards and anything installed can see your screen.
- Ghost links: whoever opens the link first reads it. If you post it publicly, that could be anyone.
- Your wallet: signing in links your public address to a session cookie (not to anything you ask). Chatting never needs a wallet.
See the architecture and this deployment's live settings on /proof.