Text you submit for a Live run is processed to answer your request. It is not stored in this site’s long-term business tables or analytics.
Identity and sign-in
Anonymous use relies on a signed, random first-party visitor identifier. If you sign in with Google or request a magic link by email, Neon Managed Better Auth stores account and session records in the database's neon_auth schema.
The site maps the verified account subject to an internal principal and links this browser's visitor principal so quotas cannot be repeatedly reset by signing out.
Launch emails
If you ask to be notified about new models or the batch tool, we store your email address, the topics you chose, and, if you are signed in, a link to your account. We use it only to send those announcements. Every email includes an unsubscribe link, and we do not share or sell the list.
Live runs and usage records
When Live is enabled, your supplied state and questions are sent from the server to Vercel AI Gateway and the selected Jev provider. Run metadata—including configuration version, hashes, status, timing, token usage, credit consumption, and safe error codes—may be retained for 30 days.
A short-term encrypted result supports idempotency for 15 minutes and is physically cleaned within 24 hours. Usage and financial ledger summaries are retained for at least 90 days; pending reservations are retained until reconciled.
Playground drafts
The custom Playground keeps its draft in this tab's session storage so a refresh can restore unfinished JSON. The browser removes that session data when the tab session ends.
The draft is sent to the server only when you start a Live run. The server checks the required credits before contacting the model, and custom draft text is not sent to site analytics.
Product analytics
Google Analytics measures page visits and bounded interactions such as selecting an example, starting or completing a Live run, copying generated TypeScript, exporting JSON, or opening an external source.
Analytics events may include a recipe or article identifier, result origin, question count, coarse timing, credit estimate, and a controlled error code. They do not include your state, message or question text, model answers, email address, account identifier, run identifier, share URL, file name, or raw error message. Share page paths are recorded as /share/[id], without the share identifier, query string, or fragment.
Abuse prevention
A signed first-party visitor ID and a short-window HMAC of network information are used for quota and rate limiting. The service does not put raw input text, browser fingerprints, or plain IP addresses into analytics properties.
Shared links
Nothing is published automatically. An unlisted share is public to anyone holding its link and is not private. Shares expire after seven days by default and can be revoked with a separate deletion credential.
The custom Playground does not publish configurations or results; recipe shares continue to exclude custom inputs, questions, and evidence.
Third-party services
Vercel hosts the app and AI Gateway; Neon stores operational metadata, account data, and sessions. Google provides product analytics and processes OAuth sign-in, and Brevo delivers transactional sign-in email. Their platform logs and retention policies are separate from this application’s database policy.
Your choices
You can use all content, illustrative samples, editing, and exports without submitting a Live run. Clearing the visitor cookie creates a new browser identity, but network limits and the shared service budget still apply.
Do not submit secrets, confidential records, regulated personal data, or material you are not allowed to process.