Guest data is kept in this browser's IndexedDB and can be encrypted behind a passphrase. Signing in is optional and keeps a copy in your account so your devices stay in step. AI provider API keys remain on the device.
The screen lists exactly what is stored, keeps restore points taken before anything risky, and offers a full export to a file and a permanent deletion.