Privacy

This is a small read-only research server. It holds no accounts and no user content.

What is logged

• Every request: the full URL including the query string — so search terms are logged — plus the client IP, user agent, timestamp and response status, through Cloudflare Workers Logs.
• OAuth clients registered by a connector, the grants they hold and the issued tokens, stored in Cloudflare KV (tokens hashed/encrypted at rest).
• Access keys, held only as an irreversible hash, with the name and any contact address supplied when the key was issued.
• Usage per access key: a daily call count, and one event per request recording the tool used, the plan, the outcome, the response time and the user agent. Never the query text in either.
• Nothing else: no cookies, no third-party scripts, no advertising or profiling of any kind.

Retention

Request logs are kept for Cloudflare's default Workers Logs retention and are not exported elsewhere. Per-request usage events are kept about three months; daily per-key counts are kept up to 400 days and are deleted automatically after that. Access tokens expire within 24 hours, refresh tokens within 7 days, and registered clients within 30 days; expired records are deleted. Revoking an access key ends the sessions it approved.

Processors

Cloudflare (Workers, D1, KV, R2) processes and stores this data. There are no other processors.

Requests and contact

To ask what is held about you, or to have it deleted: open an issue in the source repository (see SECURITY.md for private reports).