privacy.

The gallery and the steward run in your browser. The deterministic check is computed locally on public house-palette tokens — the code you paste to be checked is not sent to a server for that. No login, no account, no personal data.

Two features call a language model on our server: run live on the floor, and the spirit reading. When you trigger them, the text you submit (an instrument id, or the CSS / intent being judged) is sent to our model provider, Anthropic, to generate the response, then returned to you. We don't store these submissions beyond serving the request, and they aren't used to build a profile of you. These endpoints are rate-limited by IP address to prevent abuse.

Refraktor is bring-your-own-key. Your Google Gemini API key is stored locally in your browser (chrome.storage) and is never sent anywhere but Google. By default Refraktor has no standing access to your browsing: clicking its toolbar icon grants access to that one tab (the activeTab model), and nothing more. You can optionally turn on automatic scanning, which grants access to all sites so tools are discovered on every page — that is your choice, prompted when you enable it, and revocable anytime from the panel. To operate, Refraktor sends the current page's registered WebMCP tool definitions and your chat messages to Google's Gemini API; tool calls run against the page you're on. It sends nothing to sirocco, runs no analytics or telemetry, and keeps no history off your machine. Uninstalling it, or clearing the key, removes everything it stored.

The site uses Vercel Web Analytics for anonymous, aggregate traffic counts. It sets no advertising cookies and does not identify you.

No accounts on the open surface, no selling or sharing of data, no advertising trackers, no profiling. If a paid tier is introduced later, the data it needs will be described here before it ships.