Privacy note / Last updated July 2026
Plain-language privacy.
The public site can be read without a chat. The chat is optional and starts only after you acknowledge the recording notice.
What the chat stores
When you choose to chat, the site stores your text messages, the AI responses, a random chat-session ID, and timestamps in a Cloudflare D1 database. If you attach an image, the transcript stores only a note that an image was shared; the image itself is not written to the site’s database or object storage. To protect the service from automated abuse, the site also stores a short, one-way identifier derived from Cloudflare’s edge IP header using a secret-key hash; the raw IP address is not stored. The chat does not ask for your name, email address, or phone number. Do not put sensitive, personal, financial, medical, or confidential information into the chat or an image.
Why it is stored
Zhitao reviews aggregate questions and selected transcripts to understand what visitors want to know and to improve the website’s public profile. Transcripts are not used to train a model. Old transcripts are automatically eligible for deletion after 30 days; each new chat request runs the cleanup routine. You can delete the current session at any time from the chat panel.
Abuse protection
The chat uses Cloudflare Turnstile to distinguish normal visitors from automated abuse. Most visitors will not see a challenge; a check appears only when interaction is required. The server validates a single-use Turnstile token before storing a message or calling the model. See Cloudflare’s privacy policy for provider details.
Model provider
Your chat messages and any attached image are sent from the site’s server to OpenRouter so an AI model can generate a response. OpenRouter may route the request to an underlying model provider. Requests are restricted to endpoints that advertise zero data retention and no data collection, but provider processing still occurs outside this website. Review OpenRouter’s privacy policy and zero-data-retention documentation before using the chat if you need provider-level detail.
Image input
The optional image control accepts one JPEG, PNG, or WebP file. The browser re-encodes, resizes, and compresses it before upload, which also removes the original file’s embedded metadata. The server verifies its declared format, file signature, and size. The image is included only in that model request and is not included in later conversation turns. Remove or redact account numbers, identity documents, faces you do not have permission to share, client material, credentials, and other confidential details before sending.
Live web search
For questions that explicitly need current or external information—such as recent news, prices, policies, or a request to verify sources—the model may use OpenRouter’s web-search tool. A search query derived from your question may be processed by OpenRouter and its selected search provider. Ordinary questions about Zhitao’s public experience do not use web search. When search is used, the answer identifies its sources; search results may be incomplete or out of date and should be checked at the linked source.
Questions or deletion requests
For a question about this note or a request relating to a chat you created, email [email protected]. This is a practical privacy note for a personal website, not legal advice.