Privacy policy — draft

Sandbox prompts, projects, generation history, and test credit events are stored on the development machine. An HTTP-only signed cookie identifies your isolated sandbox. Do not submit sensitive information.

When configured, Supabase processes authentication information. The operator must configure retention, data regions, and deletion handling before a public launch.

Ending a sandbox session deletes the access cookie but retains local records. The operator can reset the dedicated sandbox database when no sessions need preservation. Production deletion and retention workflows are not released.