A private second opinion.

Share only what you’re comfortable having analyzed. Remove names, handles, locations and other identifying details before pasting.

What gets sent

Phone numbers, emails and recognizable street addresses are masked before processing. Automatic masking is imperfect: names, slang, international addresses and other details can remain. In live mode, the redacted conversation and optional context are sent to OpenAI to generate and review your interpretation. Sample analyses are built-in examples and do not call a model.

What gets kept

On Cloudflare, redacted conversation context is encrypted before being stored in our D1 database to support follow-ups for up to one hour. The encryption key is kept separately as a server secret. Local development holds that context in server memory. We do not store the original, unredacted pasted conversation. Analysis results are stored for one hour and accessible only to the signed browser session that created them. A share card includes your redacted message, any follow-up context, the summary and classification. Very long messages may use a labeled excerpt. Review the preview for personal details before downloading or sharing; automatic masking can miss identifying information.

Feedback and research

Ordinary feedback expires after 24 hours. If you separately opt in, your redacted feedback and selected outcome can remain for research review. Your pasted conversation is not included. Opted-in records require review before any use in the signal library. No private conversations are used by this application as model training data.

The model provider

We request responses with provider-side response storage disabled. This does not imply zero provider retention: provider abuse-monitoring policies and your deployment’s account settings still apply. See OpenAI’s data controls.

Cookies and usage information

A necessary signed cookie identifies your anonymous session for one day. We store usage counters to limit abuse, and anonymous counts such as analysis completions, follow-ups, helpful ratings and selected outcomes for up to 30 days. Feedback text is excluded from those analytics; changing a rating replaces the earlier rating for that analysis. Conversations are not included in these events. We do not use third-party tracking pixels.

Retention and deployment

Expired records are excluded immediately from retrieval. The application purges expired records during new analyses and an hourly Cloudflare job removes expired data. The one-hour expiry is not a promise that database backups are immediately erased. Cloudflare D1 recovery backups can retain earlier database versions according to the account’s Time Travel retention; expiration in the app does not immediately erase those backups.

Our approach

We offer possible interpretations of the evidence you provide. We can’t verify someone’s hidden intentions. Direct boundaries take priority; requests for space or no contact are never treated as an invitation to pursue harder.