What we do with your data

In your browser, in its local storage — not on our servers. We keep no copy of your chats, your folders, or their contents. Clear your browser data and they're gone; there is nothing for us to restore.

Cloud (the default): your message and the conversation so far are sent over an encrypted connection to the model, routed only through providers contractually barred from retaining it or training on it. We don't log or store it.

Local (desktop, the Cloud/Local switch in the composer): the model runs inside your browser. Your prompt never leaves your device — no account, no network, works offline once downloaded.

Web (off by default, Cloud only): turn it on and, when a question needs current information, a short search query from your message goes to our search provider (Brave) so the reply can cite sources. Off, nothing changes. It never runs in Local mode.

Your account and email address (in an EU database), a daily message counter for the free quota, and — only if you use the contact form — your support message. Payment records if you subscribe. Nothing else.

Your connection to us is encrypted (HTTPS), but our server, and the model provider on Cloud, process your prompt in the clear — they have to, to answer it. Your chats also sit unencrypted in your browser's storage.

So the guarantee is « we don't keep your conversations » , not « we are unable to read them ». If you need the stronger guarantee, use Local mode. The one encrypted piece is the optional vault export in Settings, for moving your data between devices.

Uncensored here means no refusals, no moralizing, no forced disclaimers — not that the model has no point of view. It's trained on human-written text and carries that text's biases; a genuinely neutral model doesn't exist. On contested questions it is told to lay out more than one side rather than pick for you.

The model isn't wrapped in a content filter — that's the point of Monarch. But there are lines: the site is 18+, the Terms prohibit illegal use, there is an abuse address, and we cooperate with lawful requests. This posture is still being finalised with counsel before a public launch.

Cloud needs an account (email + password) — it's the only way we can enforce the free daily quota, which is what keeps Cloud free at all. Local needs nothing: no email, no account, ever, and it still works offline once downloaded.

Either way, your data is portable: export an encrypted copy of everything from Settings → Data, and import it on another browser or device.