Privacy

The account, balance, keys, and usage ledger live in the backend. The browser keeps only an HttpOnly session cookie. Upstream access tokens are not sent to the page.

A key's plaintext appears only in the create response. The adapter does not write that plaintext to logs. Usage rows show the model, key name, token counts, and USD cost, not the prompt body.

Sign-in uses a username and password. A human check appears only when the upstream ledger enables it, and the page receives only the public site key.

Payments stay on the existing top-up provider. Payment webhooks do not land on this site. Enter payment details only on a checkout page you trust.

To delete an account or export personal data, contact the operator. This console can sign you out and disable or delete your own API keys.