Security and privacy

​

Your wallet is the account

Identity is wallet-only. You connect a wallet and approve one signature to prove ownership; it moves nothing and costs no gas. Sign-in never collects an email or a password, so the identity surface is a public address and the questions you choose to ask. Everything about your account keys to that wallet and nothing else.

​

Reasoning is not kept

The live reasoning trace streams only while an answer generates. It is filtered out before any message is stored and before history goes back to the analyst for the next turn. Never replayed, never resurfaced after a reload.

​

Responses are not cached

Your answers are private to your session and served no-store. A response meant for you is never cached where it could be handed to anyone else.

​

Local state is scoped and purged

Drafts, image uploads, and local chat state belong to the account that created them. On logout or an account switch, that state is cleared, not carried over to whoever signs in next.

​

Account erasure

A full deletion path exists. You can erase the account and its identity, not just sign out and hope.