Privacy Policy

Last updated November 5, 2026

Short version: we keep what we need to run your account and bill you. We don't store your prompts or the answers, we don't train on them, and we never sell your data.

This policy explains what Chainless (“we”, “us”) collects when you use chainless.one, the dashboard and the API, why, who it is shared with, and your rights. Questions: privacy@chainless.one.

1. Prompts and outputs

• The content of your requests and the model's answers passes through our servers in memory to be delivered to you. We don't write it to our database or logs.
• Playground chats live only in your browser tab. They are erased when you reload or close it, or sign out.
• We don't read your content, train on it, or sell it.
• To generate an answer, the request content is sent to the inference provider that runs the model. We strip your account details and the user field before sending, so the provider doesn't receive your email, wallet or name. Providers process the content under their own terms and may keep short-lived logs for security and abuse prevention.

2. What we collect

• Account: your email, or wallet address, or Google account ID and email, depending on how you sign in; an optional display name; a hashed password if you set one. We never see your wallet's private key.
• Sessions: the IP address and browser user agent at sign-in, stored with the session and deleted when it expires (30 days) or you sign out.
• API keys: a one-way hash of each key, its name, limits, expiry and when it was last used. We can't see the full key after it is created.
• Usage metadata: for each request, the model, token counts, cost, timing, status and which key was used. No content.
• Deposits: your personal deposit address, the amounts received on it, the coin, network and time.
• Security signals: IP addresses are processed in passing for rate limiting and abuse prevention.
• Support: emails you send us, and our replies.

3. Why we use it

• To provide the Service: sign-in, API keys, routing requests, billing and your usage history (performance of our contract with you).
• To keep the Service secure and stop fraud and abuse (our legitimate interests).
• To keep financial records and respond to lawful requests (legal obligations).
• To answer you when you contact us.

We don't use your data for advertising, profiling or automated decisions about you.

4. Who we share it with

Only with the service providers we need to run Chainless, and only what each one needs:

• Hosting and database: Cloudflare, which runs our servers, database, network protection and email routing.
• Inference providers: the companies that run the models, which receive request content as described in section 1.
• Blockchain data: we read deposits through blockchain node providers, which see the addresses we query. Blockchain transactions themselves are public by nature.
• Google: only if you choose Sign in with Google.

We disclose data to authorities only when the law requires it, or when needed to protect someone's life or safety. We never sell or rent personal data. If Chainless is reorganised or sold, data may transfer to the new owner under this policy.

5. International transfers

Our providers operate in several countries, including the United States. Where data protection laws require it, transfers rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep it

• Account data, API keys and usage metadata: while your account is open.
• Sessions: until they expire or you sign out.
• Deposit and billing records: as long as tax and accounting law requires, even after account deletion.
• Support emails: as long as needed to handle the request.

7. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California law), you can ask to access, correct, export or delete your data, object to or restrict its use, and withdraw consent. Write to privacy@chainless.one from the email linked to your account, or include your wallet address and a message signed with it. We reply within 30 days. You can also complain to your local data protection authority. We don't sell or “share” personal information as defined by California law, and we won't treat you differently for using your rights.

8. Cookies and local storage

• cl_s: keeps you signed in (HttpOnly, secure).
• cl_in: a flag that you are signed in, so the site shows the right buttons without a flash.
• Local storage in your browser: a dashboard cache, cleared when you sign out, and playground preferences (model, temperature).

No advertising or third-party tracking cookies.

9. Security

Traffic is encrypted in transit. Passwords and API keys are stored only as one-way hashes. Access to production data is limited to what is needed to run the Service. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.

10. Children

The Service is for adults (18+). We don't knowingly collect data from children; if you believe a child has an account, tell us and we will delete it.

11. Changes

We may update this policy. We will change the date above and, for material changes, show a notice on the site before they take effect.

Contact

Privacy requests: privacy@chainless.one. Everything else: support@chainless.one.