What we keep.
Almost nothing. Your conversations stay on your device. Our server passes your message along, seals the answer, and forgets it.
Where a message goes
What is kept, and for how long
| What | Where | How long |
|---|---|---|
| Your messages and answersIncluding chat titles | This browser only | Until you delete them. Temporary chats: until you close the tab. |
| Receipts and their saltsIn E2EE, also the one-time key that opens that answer | This browser only | Kept with the chat they belong to. |
| Anonymous session cookieA random ID, no name, no email | Your browser, read by our server | Up to one year, or until you clear cookies. |
| Prompt countersHow many prompts a session or wallet used | Our database | Kept to enforce limits. Contains no text. |
| Linked wallet addressOnly if you connect a wallet for $SEQLUDE access | Our database, tied to your anonymous session | 24 hours, or until you disconnect. Your $SEQLUDE balance is read from the public chain each time and not stored. |
| Network hashA keyed hash of your IP address, never the address itself | Our database | Rate-limit windows expire within 24 hours. |
| Error logs | Our server | Status codes only. Prompts and answers are never logged. |
Our host, Cloudflare, sees standard request details such as your IP address and the time of a request, as any website host does. The AI provider receives your message to answer it; its own policy covers what happens there.
Privacy modes
| Mode | What it means | Status |
|---|---|---|
| Private | No chat content stored by Seqlude. The provider is asked not to store it either. | Live |
| TEE | The answer comes from a model running inside sealed Intel TDX hardware. Before every message, Seqlude’s server asks for a fresh proof from that hardware and refuses to send if it fails. The proof is kept with your receipt so your browser can check it again. Seqlude’s server still passes your text along in this mode. | Live |
| E2EE | Your browser checks the hardware proof itself, then encrypts each message so only the sealed hardware can read it. Seqlude’s server only relays scrambled text, and answers come back scrambled until your browser opens them. Web search and files are off in this mode. | Live |
Pick the mode under the message box. TEE and E2EE fail closed: if the proof does not check out, the message is not sent and the prompt is not counted. Seqlude never quietly drops you to a weaker mode.
Two things to know. The sealed modes use a different model from Private, and the hardware proof names that model, so a receipt’s evidence shows it. And Intel’s own signature on the hardware report is checked by the AI provider; your browser checks that the report is fresh, not in debug mode, and tied to the key it encrypts to.
Your device is part of this
Saved chats sit in your browser’s storage. They are not encrypted there, so anyone who can use this browser profile can open them. Use Temporary chat on shared devices. Clearing this site’s data in your browser deletes every saved chat.
What a receipt proves
A receipt proves that Seqlude signed a record of what was sent and what came back, and that nothing in it changed since. It does not prove that an answer is true, or in Private mode that a particular model wrote it or that nobody else saw the request. In TEE and E2EE it also carries the sealed hardware’s proof. A receipt file holds fingerprints only. The version with chat text contains your words, so share it with care.
Deleting things
Delete one chat with the ✕ beside it, or everything with “Delete all” in the chat sidebar. There is no copy on our server to delete, because none is made.