Privacy

What this site stores about you, why, and how to take it back. Last updated 25 August 2026.

Who is responsible

NuanceForge (DEMO — not yet a registered company)
DEMO — registered address goes here
DEMO — company and VAT number go here · DEMO — country of establishment goes here
[email protected]

What is stored, and why

• Your Google account identity — the stable account identifier Google issues (never your password), plus your email address, display name and profile picture URL. The identifier is what identifies you; the rest is shown in the interface so you and the people you share with can tell who is who.
• Sessions — a random session identifier, the time it was created and expires, and the browser's user-agent string. The cookie is HttpOnly, Secure, and lasts seven days.
• What you create — your maps, the categories in them, the sources you add, and the accept/reject decisions you make, with timestamps. This is the product; without it there is nothing to show you.
• Counters — how many searches your account ran on a given day, so the usage limits can be enforced. Kept for 30 days.
• An administrative log — when access rights are granted or revoked, by whom and to whom.

There is no analytics, no advertising, no tracking pixel, and no third-party script on any page of this site. The only cookie is the sign-in session above.

The chat panel, specifically

This is the part most worth reading. The panel offers three connections and two of them never send your conversation to this site's servers at all:

• Your own API key — the key is stored in your browser and requests go directly from your browser to Anthropic. The key never reaches this site, and neither do your messages.
• A model on your own machine — requests go to the address you configure, on your own computer. Nothing leaves it.
• MCP connector — you connect this library from your own Claude client. Your questions go to Anthropic through that client, under your own agreement with them, not ours.

Conversations are held in your browser's local storage so they survive a reload. They are not uploaded, not readable by us, and clearing your browser data deletes them.

Who else sees anything

• Google — signs you in. We receive the identity fields listed above; Google's own handling of the sign-in is theirs.
• Cloudflare — hosts the site and its database, acting on our instructions.
• OpenAlex — a scholarly-metadata service. When a search runs, the topic text you wrote is sent to it. Requests carry our contact address, not yours, so nothing identifies you to them.
• Anthropic — only if you choose the API-key connection, and then directly from your browser under your own agreement with them.

Nothing is sold, and nothing is shared with anyone else.

How long it is kept

Sessions expire after seven days and expired rows are deleted. Usage counters are dropped after 30 days. Everything else is kept until you delete it or delete your account.

Your rights

From your account page you can download everything this site holds about you as a JSON file, and delete your account outright. Deletion is immediate and irreversible, and it takes the maps you own with it — including for anyone you shared them with. Rows on other people's maps that merely record that you added or decided something are kept but stripped of your identity, because deleting them would edit someone else's history.

You may also ask us to correct something, object to a use, or complain to your data protection authority. Write to the address above.

Security

Access is checked on the server for every request, and refusals do not reveal whether a map exists. Sign-in tokens are verified in full before anything is written. We never see your Anthropic API key.

Children

This site is not intended for anyone under 16.

Changes

If this policy changes materially, the date above changes and the change is described here.