Privacy

• The email address you sign in with. Sign-in is a 6-digit code sent to that address, or Google or GitHub; the code expires and is not kept. No ID or phone number is asked for.
• From checkout: the email address and the amount paid, as the crypto checkout reports them.
• API keys as a salted hash, with the key name, status, limits and timestamps. The key itself is shown once and not stored.
• One usage record per request: request id, model, token counts by class, the source of those counts, and the charge.
• The ledger of balance changes: top-ups, charges, refunds and disputes.
• SHA-256 fingerprints, never the text, of each request and response, so a signed receipt can show what was billed; and of large system prompts, kept 7 days, to find prompts many accounts send and cache them for everyone.
• Where your first visit came from: the referring site, the link’s campaign tags and the page you landed on, saved with your account when your first sign-in creates it.

Request and response bodies, unless you turn on replay for a key (it keeps that key’s request bodies for 7 days) or the response cache for a key. Otherwise prompts and completions pass through the gateway and are not written anywhere. Chats saved in the console stay in your browser. Memory, which stores the notes you save on our side, is off until you switch it on.

• Cloudflare runs the service and stores the data above.
• Hidden (sellhidden.com) runs the crypto checkout. For a crypto top-up it receives the email address, the amount and the payment.
• Resend (resend.com) sends sign-in codes, receipts and account email. It receives your email address and the message.
• Cloudflare Web Analytics counts page views on unrestrictable.ai without cookies. No advertising or third-party tracking script runs on the site.
• Every model on the Models page is served by third-party model hosting providers under contract with Uplink Switch LLC. They receive the request and response content for those calls.

Keys are kept while the account is open. Usage records and ledger entries are kept as accounting records after it closes.

Signing in to the console sets a cookie that keeps you signed in, and one that remembers which organization you picked. A referral link sets one that holds its code for 30 days. Your first visit sets one for 90 days with the site that sent you, the campaign tags in the link and the page you landed on; when your first sign-in creates your account, they are kept with it. Your theme choice is kept in your browser’s local storage and never sent to a server.

The date at the top changes when this page does. Questions go to hello@unrestrictable.ai.