What we can and cannot see

Giwaagent is a static site. There is no account, no database and no analytics. We could not tell you how many people have used it.

Keys are written to this browser’s local storage and read back by this page. They are sent to the provider you chose, over HTTPS, and to nobody else. Clearing them in the console, or clearing site data, removes them.

Three parties see part of what you do, and it is better to name them than to imply nobody does:

• Your AI provider sees your prompts and your key, because that is who you are talking to.
• r.jina.ai sees any URL you ask the reader to fetch. It is what makes reading a page possible without a backend, and it is a reader, not a private browser.
• The GIWA Sepolia RPC sees that someone asked it for a block. The chain page sends no identifying information.

JavaScript in the sandbox runs in a worker on your machine. It never leaves. It has no DOM, no access to this page’s variables and no access to local storage, so a snippet cannot read the keys sitting beside it.

The site is served by Vercel, which keeps standard request logs as any host does. We do not add anything to them.