Privacy Notice

Chat conversations

Google sign-in is not required. Unsaved chats clear on refresh or when you start a new chat. In the Cloudflare hosted version, you may explicitly save chats in an encrypted per-browser Durable Object vault; in the local or configured self-hosted Node version, chats and case notes use an encrypted server-side browser vault. A persistent HttpOnly browser cookie, lasting up to one year and renewed on vault access, allows this browser to resume them. Clearing cookies removes browser access, not the stored records. The server operator holds the encryption key; this is not end-to-end encryption or a privileged legal channel. Delete removes a chat from the active vault. Exports are ordinary unencrypted JSON files; exported copies, server backups and operating-system storage require separate management. Keep your own secure backup.

The Cloudflare hosted version can read PDF, DOCX, TXT and document photos with Cloudflare Workers AI. The file is sent to Cloudflare for conversion to text; upload bytes are held temporarily in request memory and are not added to the public source library. Extracted text is shown to you before sending; when submitted, it is processed with your question by Cloudflare Workers AI. In the local or configured self-hosted Node version, file reading uses your configured local processing. Extracted text and bounded case-note excerpts are retained only if you explicitly save the conversation. Machine reading can be wrong or incomplete.

Each question sends recent chat context, up to 12 messages, to this application's server to search its saved official-source library. In the hosted Cloudflare version, a model served through Cloudflare Workers AI receives that context and bounded passages from official sources to prepare a conversational response; it does not require an external AI API key. The local version uses its configured local model. The library stores public source pages, not your conversation. Hosting infrastructure still processes requests; do not assume the chat is privileged or confidential.

Security and technical data

The service issues a signed, HttpOnly short-lived browser-session cookie (up to 24 hours) to protect chat requests. Rate limits use pseudonymous identifiers and time-limited counters, including an identifier derived from network information, to reduce abuse and control costs. Cloudflare and hosting providers may process network, operational, and security data.

The chatbot does not currently charge users, collect payment-card information or use advertising trackers. Saving is optional and limited to ten chats per browser vault, up to one hundred messages per chat, subject to text and storage limits. Avoid A-Numbers, Social Security numbers, passport details, full birth dates and payment information; use redacted descriptions where possible.

Source-library responses and translation

A scheduled collector checks approved public government pages independently of chat questions. In conversational mode, a model hosted with this application receives bounded conversation history and saved evidence to write an answer in the selected language. It does not require an external AI API key. Library-only mode returns excerpts. Retrieval, generated answers, and translations can be wrong or omit context; source information can become outdated. Verify important details on the official page.

The main chat, Settings and upload controls use bundled machine-translated interface catalogs and do not request translations when you select a language. Catalog maintenance used public interface text only, with local translation and a public translation service; no chats or documents were sent. Separate policy-page translations may use Cloudflare Workers AI where configured, using public policy text only, and may be cached up to 30 days. The English notice is the reference version.

External websites

Official-source citations may open separate government websites. Those websites have independent terms and privacy practices. Verify information there before acting.

Privacy questions

For questions about this service's handling of personal data, contact us using the address below. Do not email sensitive case records or identity documents. Provider-specific retention and deletion depend on the relevant provider's terms and applicable law. This statement is not a guarantee of compliance with every jurisdiction's requirements; obtain qualified legal review before public launch.

Privacy contact: Pawnkerz@gmail.com