Privacy Policy

1. Information we handle

• Account details: when you sign in with Google, we receive basic profile information such as your name, email address, profile image and Google account identifier. If you create an account with email, we keep your email address, verification status and a one-way password hash; we never store the password itself. We keep account and session records in Cloudflare D1.
• Security data: session records may include an IP address and browser user agent. We use a pseudonymous IP-derived value for rate limits and keep request counters to prevent abuse.
• Playground usage: we record the model name, call status, time and available usage or cost figures. We do not save your Playground question or context in our D1 database.
• Project submissions: an unfinished form draft is kept in your tab’s session storage so it survives sign-in, and is removed after submission or when the tab closes. Once submitted, we keep the project name, category, website or GitHub links, description, review status, submission time and the account that submitted it. Submissions are private while awaiting review; selected project details and links may later appear in the public directory.
• Newsletter signup: if you subscribe, we keep your email address, signup page, page language, the consent wording version and time of signup in Cloudflare D1. You do not need an account to subscribe. We do not share the subscriber list publicly.
• Website activity: our hosting and analytics services can receive information about pages viewed, device and browser details, approximate location and interactions with the Site.
• Community resource views and clicks: after a featured resource remains at least half visible for about one second, or when you follow its link, we may keep aggregate daily counts by resource, page placement, language and Cloudflare country code. This feature does not store your raw IP address or account identity.
• Anonymous site likes: we keep one site-wide total and temporary pseudonymous request counters used to prevent automated abuse. Likes do not require an account and are not connected to an account identity.

2. How we use it

We use this information to sign you in, operate the Playground, review project submissions, send occasional emails you subscribed to, enforce free-use limits, protect the Site, understand which pages and features are useful, and respond to inquiries. We do not sell your personal information. Community resource placements may be selected by page language and Cloudflare country code, without using account identity or storing a raw IP address for this purpose.

3. Model processing

When you run a Playground decision, your context and question are sent to OpenRouter and the selected model provider to produce an answer. Their handling of that input is governed by their own policies. Avoid sending private or sensitive material. The model answer returns to your browser; our D1 usage record does not contain the question or answer. Read OpenRouter’s Privacy Policy for its processing details.

4. Providers, analytics and cookies

Cloudflare hosts the Site, stores account and usage data in D1, and provides Turnstile abuse protection. Google handles Google sign-in. Resend delivers requested account verification and password-reset emails and therefore processes the recipient address and email delivery data. We use Google Analytics, Microsoft Clarity and Plausible to understand site use. These services may process technical and activity data under their own policies. We mark Playground account, input and answer areas for masking in Clarity recordings.

Sign-in uses a session cookie. Analytics providers may use cookies or similar technologies depending on their service and your browser settings; Plausible is designed to work without cookies. You can manage cookies through your browser, although blocking essential cookies may prevent sign-in. Links to third-party sites are governed by those sites’ own privacy practices.

5. Retention and security

We keep account and usage records while needed to operate and protect the Site, and delete or de-identify them when they are no longer needed, subject to applicable legal requirements. Session and verification records expire. Service providers may retain their own records under their policies. We use access controls, one-way password hashing and encrypted stored Google OAuth tokens, but no online service can guarantee absolute security.

6. Your choices

You can stop using the Playground and sign out at any time. To leave the newsletter list, or to request access to, correction of, or deletion of your information, email [email protected]. Newsletter emails will include an unsubscribe method when sending begins. We may need to verify your request and may retain limited information where required for security or legal reasons. Depending on where you live, you may have additional privacy rights.

7. Children, changes and contact

The Site is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as the Site changes; the current version and update date will appear here. For privacy questions, contact [email protected].