Privacy
Privacy
Short, because the posture is simple: the site collects nothing, and the product is built to need as little about you as possible.
What this site collects
Nothing. No cookies, no analytics, no trackers, no fingerprinting. The measured numbers on the storefront render from a static feed file.
What never leaves your machine on the free tier
Everything. The free Reflex engine runs locally; the playground on that site talks to your own machine.
Decision stats — off unless you opt in
If you switch decision stats on, your machine sends counts only: how many decisions it made, how many times it abstained (said “not sure”), per suite, plus a short machine label and toolchain name — signed by your account key. Never the text of your questions or answers. Unset means nothing is sent. The stats pool has a public view, so you can see exactly what a row holds. This lane runs on our test network today.
What the hosted tier will collect (when it opens)
Preview — a commitment about a tier that does not exist yet, not a description of a running system. When the hosted tier opens, it collects: an account identifier from the sign-in you choose, your API keys (stored as hashes — never the key itself), and the metering needed to run quotas. Question text is used to answer your request — never for training unless you opt in. Decision receipts carry the build fingerprint and hashes of the input and answer — no personal data.
Retention period, processing location, and deletion timing: published with the hosted tier's launch, on this page, before any purchase is possible.
If you give an email for sign-in or renewal notices, it is used for that purpose only — never sold, never joined with analytics (there is no analytics to join). A deletion path ships with the account page; its timing is published with the hosted tier's launch.
Changes
This page updates as the hosted tier lands; material changes to the paid tier's data handling are announced on this page before they take effect.