Our No-Log Commitment
Piwi AI is built around one promise: your conversations are yours alone. We do not read, store, or log the content of your chats. There is no analytics spy, no ad tracking, no data selling — ever.
The uncensored nature of this AI exists precisely because we are not in the business of watching what you do.
What we never store
- Chat content — your messages are sent to the AI, processed, and discarded. Nothing is kept server-side (unless you explicitly enable encrypted history, see below).
- Raw IP addresses — for visitor metrics, IPs are hashed before storage and can never be recovered.
- Behavioral tracking — no browsing history, no mouse tracking, no session recording.
- Third-party analytics — no Google Analytics, no Facebook pixels, no advertising cookies, no tracking scripts.
- Data selling — we will never sell, rent, or share your data with anyone.
What we collect (and why)
Only the strict minimum required to run the service:
- Account — username and a strongly hashed password (never stored in plain text).
- Device fingerprint — a hash of your device used only to prevent account farming (max 3 accounts per device). It identifies the device, not the person.
- Usage counters — number of messages, images and tokens. Aggregated, no content. Used for daily limits and the public stats you see on the homepage.
- Site visits — an anonymized, deduplicated counter per day, with a hashed IP. Used to know how many people visit, nothing more.
- Contact form — the name, email and message you voluntarily submit, so we can answer you.
Chat history (optional & encrypted)
History is disabled by default. If you enable it from the chat sidebar, your conversations are stored encrypted (Fernet / AES) on our server. The decryption key stays on the server and never leaves it: you can read your conversations in the app, and the platform is technically able to decrypt them (for support or a legal request). They are never stored nor displayed in plain text in the database.
You can delete any conversation at any time from the sidebar, or clear your entire history in one click. Deleting is permanent.
Private messages (support)
The private messenger (chat with our team) stores messages encrypted (AES / Fernet) on our servers — the same protection as chat history. Only you and our staff team can read a conversation. Messages are never sold or shared.
Agent sandbox & files
When the AI acts as an agent, every conversation gets an isolated sandbox — files it creates are kept in a private per-session folder, inaccessible to other users, and automatically cleaned up after inactivity. You can also delete your session at any time.
API & payments
API usage is tracked (tokens and cost) for billing only. Payments are processed with cryptocurrency; blockchain transactions are public by nature. We never see or store your wallet private keys.
Cookies & local storage
- One local storage token to keep you logged in (JWT).
- Cloudflare may set a security cookie to verify your browser (anti-bot challenge) — it contains no personal data.
- That is all. No tracking, no profiling, no third-party cookies.
Security
- HTTPS everywhere (TLS) via Cloudflare.
- Passwords hashed — never stored or transmitted in plain text.
- Strict security headers (CSP, HSTS, X-Frame-Options...).
- Rate limiting and DDoS protection on all endpoints.
- Per-user sandboxes isolate agent activity.
Your rights
- Delete your account — from your profile page; this removes your account, stats, encrypted history and sandbox files.
- Clear your history — at any time, from the chat sidebar.
- Ask us anything — for any question or data request, use the contact form or join our Discord.