Privacy note / Last updated August 2026

Plain-language privacy.

The public site can be read without a chat. The chat is optional and starts only after you acknowledge the recording notice.

What the chat stores

When you choose to chat, the site stores your text messages, the AI responses, a random chat-session ID, and timestamps in a Cloudflare D1 database. If you attach an image, the transcript stores only a note that an image was shared; the image itself is not written to the site’s database or object storage. To protect the service from automated abuse, the site also stores a short, one-way identifier derived from Cloudflare’s edge IP header using a secret-key hash; the raw IP address is not stored. The chat does not ask for your name, email address, or phone number. Do not put sensitive, personal, financial, medical, or confidential information into the chat or an image.

Why it is stored

Zhitao reviews aggregate questions and selected transcripts to understand what visitors want to know and to improve the website’s public profile. Transcripts are not used to train a model. Old transcripts are automatically eligible for deletion after 30 days; each new chat request runs the cleanup routine. You can delete the current session at any time from the chat panel.

Abuse protection

Outside mainland China, the chat uses Cloudflare Turnstile to distinguish normal visitors from automated abuse. Most visitors will not see a challenge; a check appears only when interaction is required. See Cloudflare’s privacy policy for provider details. For requests Cloudflare identifies as coming from mainland China, the site instead runs a self-hosted ALTCHA proof-of-work check in your browser. The server stores a short-lived signed challenge record containing the anonymous client identifier, session ID, message hash, creation time, and expiry; it does not contain the message text, and expired records are cleaned up automatically. Each Turnstile token or ALTCHA challenge can be used only once, before a message is stored or a model is called.

Model provider

Your chat messages and any attached image are sent from the site’s server to OpenRouter so an AI model can generate a response. OpenRouter may route the request to an underlying model provider. Every request excludes providers that collect user data. Domestic-model and DeepSeek requests are additionally restricted to endpoints that advertise zero data retention. GPT-5.6 Luna currently has no matching zero-data-retention endpoint, so an overseas Luna request may use a no-collection provider that retains data temporarily for abuse monitoring or legal requirements. OpenRouter states that it does not retain prompt or response content unless prompt logging is enabled, but underlying-provider processing still occurs outside this website. Review OpenRouter’s privacy policy and zero-data-retention documentation before using the chat if you need provider-level detail.

Image input

The optional image control accepts one JPEG, PNG, or WebP file. The browser re-encodes, resizes, and compresses it before upload, which also removes the original file’s embedded metadata. The server verifies its declared format, file signature, and size. The image is included only in that model request and is not included in later conversation turns. Remove or redact account numbers, identity documents, faces you do not have permission to share, client material, credentials, and other confidential details before sending.

Live web search

For questions that explicitly need current or external information—such as recent news, prices, policies, or a request to verify sources—the model may use OpenRouter’s web-search tool. A search query derived from your question may be processed by OpenRouter and its selected search provider. Ordinary questions about Zhitao’s public experience do not use web search. When search is used, the answer identifies its sources; search results may be incomplete or out of date and should be checked at the linked source.

Questions or deletion requests

For a question about this note or a request relating to a chat you created, email [email protected]. This is a practical privacy note for a personal website, not legal advice.