Privacy
We cannot leak what we never collect
UncensoredAI is built so that an account carries no personal data at all. There is no sign-up form, no email verification and no password to reset — only a 16-digit key that you hold.
01 — Accounts
A key, not an identity
When you press Generate my access key we create a random 16-digit number. That key is your sign-in and your API credential. We immediately store a SHA-256 hash of it and return the plain value to you exactly once.
Because only the hash is kept, nobody — including us — can read your key back. If you lose it, the account is unrecoverable by design. Rotating the key invalidates the old one everywhere and signs out every other device.
02 — Data
What is on disk
Stored
- Account id
- A random UUID generated when the key is minted. Not derived from anything about you.
- Key hash
- sha256(your 16-digit key). The plain key never reaches our disk.
- Key hint
- The last four digits, so the dashboard can show •••• 6634.
- Balance
- Your prepaid credit in USD.
- Usage metadata
- Model id, prompt/cached/completion token counts, cost, latency and timestamp.
Never stored
- Email address
- Name or username
- Phone number
- Password
- Prompts or completions
- Uploaded files
- IP addresses
- Device or browser fingerprints
- Cookies for advertising or analytics
03 — Requests
Prompts pass straight through
A chat request is forwarded to the upstream provider and the response is streamed back to you. We do not persist the body of either. The only thing recorded is the metadata needed to bill you: model, token counts, cost and latency.
Requests are proxied over TLS to https://uncensoredai.dev. Your provider of record sees the prompt as it would with any direct API call; we do not add identifiers to it.
04 — Retention
Deletion and third parties
Deleting an account
Ask on Telegram from the account in question and we remove the account row, its sessions and its usage log. There is nothing else tied to you.
Third parties
No analytics scripts, no advertising pixels and no data brokers. The only outbound call is to your upstream model provider.
