Privacy

1. Content you process

The cleaning tools and AI Vault run as JavaScript in your browser. Text you paste and files you import (ChatGPT, Claude or Gemini exports) are read locally. They are not uploaded to cleanchatgpt.com or sent to any AI model.

The AI Vault page is served with a Content-Security-Policy that only allows network connections to cleanchatgpt.com itself. Imported messages are displayed without HTML and remote images inside them are never loaded.

By default, AI Vault keeps everything in the memory of the browser tab: closing or reloading the tab erases it. You can wipe a session at any time with “Clear session”.

2. Data stored on your device

Preferences: your language and light/dark theme choice are stored in your browser’s local storage.

Optional encrypted vault: if you turn on “Save encrypted on this device”, your vault is stored in your browser (IndexedDB) after being encrypted with AES-256-GCM using a key derived from your passphrase. We never see the passphrase or the data. Without the passphrase it cannot be recovered. You can delete it in Settings → Storage or by clearing this site’s data in your browser.

Files you download (exports, backups, alias keys) are saved where you choose; handle the alias key as sensitive information.

3. Hosting and security

cleanchatgpt.com is delivered by Cloudflare, Inc., which acts as our hosting and content-delivery provider. To serve the pages and protect them from abuse, Cloudflare processes technical data such as IP addresses, request URLs, user agents and timestamps, and may use strictly necessary security mechanisms. This processing does not include the content you clean or import.

We do not operate our own server logs, analytics or user accounts. Cloudflare processes this data under its own data processing terms and may transfer it outside the EU with appropriate safeguards.

Legal basis: our legitimate interest in providing a secure website (Article 6(1)(f) GDPR).

4. Assistants connected through MCP

The optional AI Vault MCP server runs on your own computer and reads a backup file you provide. When an assistant (for example Claude Desktop) reads knowledge or messages through it, that assistant sends the content to its own provider as part of your conversation, under that provider’s terms. You control this with per-assistant tokens, roles and the “What assistants may read” setting.

5. Shared workspaces on a server

cleanchatgpt.com does not store workspaces on a server: roles, proposals and reviews work inside your own vault. A self-hostable collaboration server is a separate, optional component that is not enabled on cleanchatgpt.com; whoever deploys one is responsible for the data stored there and for its own privacy notice.

6. Your rights

Because we do not hold the content you process, there is nothing for us to access, correct or delete about it — it is on your device. For the technical data processed by our hosting provider you may exercise your rights of access, rectification, erasure, restriction and objection, and you may complain to your data protection authority (in Spain, the AEPD).

7. Changes

We will update this page if the way the site processes data changes, and change the date above.