Privacy
How Temper handles your data
The short version
- No ads, no tracking cookies, no third-party analytics, and nothing is sold.
- Without an account, your specs, versions and connections stay in your browser.
- With an account, specs and API keys are encrypted on your device before upload. Temper's server only ever holds ciphertext it can't read.
- When you connect an AI model, your browser talks to that provider directly. Your prompts and keys don't pass through Temper's server.
What Temper stores, and why
- Account: your email, a salted hash that verifies your password (never the password itself), copies of your vault key encrypted with your password and with your recovery key, and, if you turn it on, your encrypted two-factor secret and hashed recovery codes. Used to sign you in. Kept until you delete your account.
- Encrypted vault: your saved specs, connections (including API keys) and settings, encrypted in your browser. Kept until you delete them or your account.
- Sessions: a hash of your sign-in token, its browser and operating system name (for example "Chrome on macOS"), country and last use. A session ends after 7 days, or after a day without use.
- Security activity: sign-ins, failed attempts and account changes, with the same browser, system and country details, so you can spot misuse on your account page. The last 200 events per account are kept.
- Abuse protection: short-lived counters keyed by a salted hash of your network address, or a hash of the email being tried, to slow down password guessing.
- Visit counts: the page, the day, your country, the referring website's name and whether you use a phone, tablet or computer, with a visitor number made from a salted hash of your network address and browser that changes every day. No cookies are used, your address and browser string aren't stored, known bots are skipped, and records are deleted after 180 days.
- Published reports: only what you choose to publish, which anyone with the link can see. You can delete a report at any time from your account page.
Cookies
Only one: the sign-in cookie, set when you sign in and needed for your account to work. Your browser's local storage keeps your work and preferences on your own device.
Services involved
- Cloudflare hosts the site and its database, with the primary location in Western Europe. Cloudflare keeps short-lived technical logs of requests (such as the address requested, time and errors) to keep the service running and help fix problems.
- AI providers you connect (such as Anthropic, OpenAI or Google) receive the prompts your browser sends them with your key, under their own terms. Temper's server isn't involved.
- The free in-browser model downloads its runtime from jsDelivr and the model files from Hugging Face the first time you use it.
- Temper in Claude or ChatGPT: when your chat calls Temper's tools, the spec details it sends are processed to produce the answer and aren't stored. Your chat app's own privacy terms cover the conversation itself.
- Fonts are served from this site, so no font service sees your visit.
Your choices and rights
You can see your devices and security activity on your account page, sign out other devices, and delete your account there: that removes your account, vault, reports, sessions and activity at once. Data protection laws such as the GDPR also give you the right to ask for a copy of your data, have it corrected or erased, and to complain to your data protection authority. For any request or question, write to eremeev.dan63194@gmail.com.