Privacy Policy

What We Don't Store

• We do not persist your API Key in our database.
• We do not save full upstream request bodies, response content, or conversation history (unless you explicitly export it).
• Detection session reports are stored only in browser sessionStorage by default and are lost when the tab is closed.

Server Proxy Explanation

Due to browser same-origin policy, detection requests are forwarded through our /api/detect/proxy route to the upstream URL you provide. The key briefly passes through server memory for TLS forwarding, but the application code is designed not to log these fields; please also disable platform-level sensitive logging on deployment.

Public Leaderboard

Only when you click 'Submit to public board' will site name, host, model name, and score summary be written. No keys included. IP is stored only as a hash for rate limiting.

Third-Party Infrastructure

When deployed on Vercel with optional Supabase / Upstash / Sentry, please also review the respective vendors' data processing terms.