What is recorded about a caller, what is not, and how long any of it lasts.
Client IP addresses are not written to logs. The demand counters record a two-letter country, supplied by the network layer, and a User-Agent string truncated to 120 characters. That is the whole of it.
There are no cookies, no analytics scripts, no third-party trackers and no advertising identifiers, because there is no browser session to attach them to.
POST /credits/trial derives your evaluation token from your client address using a keyed hash. The address is used to compute the token and is then discarded: what is stored is a hash of the resulting token and a balance. The address itself is never written to storage, and the stored value cannot be reversed back to it.
IPv6 addresses are collapsed to their /64 prefix before use, so the value involved is less specific than the address you connected from.
Request bodies are processed to produce the response and are not retained, except where retention is the product you asked for:
Vault stores only ciphertext that you encrypted before sending. Encryption keys and plaintext are never transmitted to this service and therefore cannot be read by it, disclosed by it, or produced by it in response to any demand.
Once-key stores an action key, a hash of your payload and any result you record, until its time to live expires (24 hours by default).
Meeting memory stores the transcripts you import, in a namespace you control, until you delete them. DELETE removes the row and its search index entry.
Credit balances store a hash of the token and the amounts. The token itself is never stored, which is why a lost token cannot be recovered.
The service runs on Cloudflare Workers and Durable Objects; Cloudflare processes traffic and stores the data described above on our behalf. Payment settlement is performed by a third-party x402 facilitator and by the Base network, which is a public blockchain.
Payments are public by nature. A settled payment is permanently visible on-chain, including the paying address and amount. That is a property of the payment rail you chose, not something this service can undo.
Because no account and no identity is collected, most requests about personal data cannot be matched to a person here. Data you stored under a namespace or token you control can be deleted by you at any time using the documented endpoints. For anything else, write to batman_fool@hotmail.com or https://github.com/olie-kiss/agentic-endpoints/issues.