Privacy Manifest

GhostChat is private by architecture, not by policy.

✅ No data leaves your device

All inference happens via WebGPU/WASM in your browser. No fetch() with user data. Verifiable in DevTools → Network.

✅ IndexedDB only

Conversations, documents, embeddings stored locally via Dexie. Clear anytime in Settings. Optional encryption with PBKDF2 + AES-GCM.

✅ No analytics by default

No external trackers. CSP headers, SRI for CDN assets. Burn mode for memory-only sessions.

Verify yourself

Open DevTools → Network → send a message. Request count must stay 0.

Go to /verify