AI Vault by cleanchatgpt.com
ES Open AI Vault

How AI Vault works

AI Vault is a web app that runs on your device. Your browser downloads it from cleanchatgpt.com once; from then on, your exports are opened, analysed and exported locally.

Your assistant

You request the official export from ChatGPT, Claude or Google Takeout.

Your browser

AI Vault reads the files, builds the library, knowledge and privacy scan in memory.

What you share

Only the file you preview and download — or nothing at all.

Step by step

  1. Export

    Follow the guide for your assistant. The export arrives by e-mail as a ZIP (ChatGPT, Claude) or through Google Takeout (Gemini).

  2. Import

    A background worker reads the ZIP without loading attachments into memory, recognises the provider by the data, keeps original ids and branches, and reports anything it could not import.

  3. Explore

    Read conversations with real branch switching, search everything, rename, tag, star and add private notes. Re-imports add new messages and never overwrite your notes.

  4. Build knowledge

    Turn messages or exact quotes into decisions, problems, solutions and notes, connect them with meaningful relations and follow their status over time. Local rules suggest candidates; you decide.

  5. Protect

    Before sharing, the scanner lists personal data and secrets in exactly what you selected. Choose per value or per occurrence to pseudonymize, remove, keep or exclude.

  6. Review and export

    Check the exact Markdown, JSON or Obsidian files, confirm, and download. The alias key is a separate download that you control.

Where your data goes

What happensWhereSent to a server?
Loading the website and the app Cloudflare delivers the files Like any website: your IP address and request details reach the hosting provider
Importing an export Your browser (background worker) No
Search, knowledge, suggestions, timeline Your browser No
Privacy scan and export Your browser No — you download the file yourself
Optional encrypted storage Your browser (IndexedDB), encrypted with your passphrase No
MCP server Your computer No — but anything an assistant reads through MCP is sent by that assistant to its own provider, under its terms

Check it yourself

  • Open your browser’s developer tools, go to the Network tab and import a file: you will only see AI Vault’s own files being loaded.
  • The app page is served with a Content-Security-Policy that only allows connections to cleanchatgpt.com itself, so even a bug could not send your data elsewhere. You can read the policy in the response headers.
  • Imported text is rendered without HTML and remote images are never loaded, so a malicious message cannot make your browser contact third parties.
  • The app sets no cookies and has no analytics. It stores your language and theme choice, and your encrypted vault only if you turn that on.

Limits worth knowing

  • Providers change their export formats without notice. Unknown content is kept as text when possible and reported.
  • Detection is heuristic and pseudonymization is not anonymization. Always read the preview.
  • Attachments are not stored in the vault and are never scanned.
  • Without encrypted storage, closing or reloading the tab erases the session.

Under the hood

Formats ChatGPT conversations.json (2023–2026, including split files and .dat media), Claude conversations.json (all branches), Google Takeout My Activity (JSON).
Search Accent- and case-insensitive regular expressions over your messages, run in small slices so the page stays responsive.
Privacy detectors Patterns with checksum validation (DNI/NIE control letter, IBAN mod-97, Luhn for cards), known API-key formats, credential assignments and conversational cues for names.
Encryption AES-256-GCM with a key derived from your passphrase using PBKDF2-SHA-256 (600 000 iterations); the header is authenticated. No recovery key exists.
Exports Plain Markdown, JSON with a provenance manifest, and an Obsidian-compatible ZIP with consistent wiki links.
Assistants A local MCP server with per-assistant tokens, role checks on every call, idempotent writes and an audit log.
Open AI Vault Export guides