What we hold, and what we don’t

Your chat

The chat export you choose is read entirely in your browser. It is parsed by a Web Worker on your own device and every statistic is computed there. It is never uploaded: there is no endpoint that accepts it, and no copy of it, or of any statistic derived from it, is written to a server or to disk.

It exists only in the memory of the tab you opened. Closing or refreshing the page destroys it, which is why you have to choose the file again if you reload. If you keep the recap in your library, the statistics computed from it are stored — see below — but the file itself never is.

Your account

We store, for as long as your account exists:

• your email address, and a Google account identifier if you sign in that way;
• how many credits you have and when the free one was granted;
• for each recap you run: the date, the number of messages in the chat, whether it was a one-to-one or a group, and the detected language. Nothing else — no participant names, no message text, no statistics;
• a record of any purchase: which pack, the amount, and the payment reference.

The per-recap row exists so credits can be metered. It cannot be used to reconstruct anything about the conversation, because none of the conversation is in it.

Recaps you keep

Saving a recap to your library stores the statistics it was made from: the counts, the participant names as they appear in the export, the top phrases and emoji, the reply times,. That is what lets a saved recap replay exactly as it did — it is rebuilt from the numbers rather than kept as pictures.

This is the one thing derived from your chat that we store, and it is stored only when you keep a recap. The chat file itself is still never uploaded and cannot be reconstructed from a saved recap: there is no message text in it, only the statistics computed from it. Deleting a recap from your library deletes those statistics immediately, and deleting your account deletes all of them.

Payments

Purchases are handled by Polar, who act as merchant of record and see your payment details; we never do. We keep only which pack you bought, the amount, and Polar’s reference for it.

Cookies

One cookie to keep you signed in, plus a short-lived one during sign-in for security, and two that remember your choice of language and of phone platform. All are strictly necessary or set by your own choice, so no consent banner is required and none is shown. There is no advertising cookie of any kind, and nothing that follows you to another site.

Traffic measurement

We use Vercel Analytics and Vercel Speed Insights to count page views and measure how fast pages load. Both are cookieless: they set nothing on your device, assign you no identifier, and cannot follow you to another site. What is recorded is aggregate — which page, roughly where in the world, what kind of device, and how long it took to render.

Neither can see your chat. The file is read inside a Web Worker on your device and no statistic derived from it is ever sent anywhere, so there is nothing about the conversation for either of them to measure.

Deleting everything

The delete button on your account removes your account and every row attached to it immediately. There is no soft delete and no retention period. You can also ask by email and it will be done by hand.

Your rights

Under the GDPR you can ask for a copy of what we hold, ask for it to be corrected, or ask for it to be erased. Given the list above, a copy is your email address, your credit balance, and a short list of dates and message counts.