Short form: chats are never training data.

Account email, hashed password, and — if you paid — the Stripe customer ID we get back after payment. That's it for the human-identifiable data. We do not ask for a phone number, address, birthday, or job title.

We store your chat history so you can find it again in the sidebar. It is server-side encrypted at rest.

We do not use your chats to train Anthropic's public models, our own models (we have none), or any third party's models. This is not opt-out — it is off, by default, for everyone.

We do not sell, license, or share your chats with advertising networks, data brokers, or partner companies. There are no such partners.

Anthropic. When you send a message, we forward it to Anthropic's API on your behalf, they stream a response back, we stream it to you, and both sides retain what they need to serve you and satisfy their own security & abuse policies. Anthropic's data-handling terms for API customers apply and are linked below.

Stripe handles it end-to-end. We never see your card number, CVC, or bank routing details. We see a customer ID and a subscription status. Stripe's data policy applies to your card details.

We set one session cookie so you stay logged in. There is no analytics cookie, no marketing pixel, no A/B test cookie, no third-party script. If we ever add analytics, it will be a self-hosted, IP-anonymized tool and we'll say so here.

Cancel your subscription and email us — we delete the account, the chat history, and any residual logs within 30 days. Anthropic's retention window on API traffic runs separately; check their published policy for that timeline.

Email privacy@ladle.chat. We reply in person, not from an automated queue.