Short version: if you don’t sign in, nothing is saved anywhere. If you sign in with Google, your settings, history, pastes and images are stored privately so they follow you across devices. There are no analytics or advertising trackers.
Nothing is saved. Tools work in memory and forget everything when you close or reload the page, and nothing is written to your browser’s storage.
Signing in is optional and uses Google sign-in through Supabase, our database and authentication provider, which receives your name, email address and profile photo. To sync across devices we then store your settings, pinned and recent tools, tool inputs, output history and pastes in Supabase, and gallery images in Cloudflare R2 (private storage — images are only reachable through short-lived links issued to you). Each account can only read its own data. You can erase all of it at any time with Delete my data on your profile page.
Only two things: your AI API keys, which are never uploaded anywhere except directly to the AI provider when you run a tool, and the sign-in session token that keeps you logged in. Signing out removes the session; Delete my data also removes the keys.
Pages are served as static files; the host may keep standard server logs (IP address, user agent, requested URL) for security and reliability.