Privacy Policy

Effective date: June 1, 2026 · Service: this chat application

Overview

This site is a chat assistant proof-of-concept. This policy describes what information the service collects, how it is used, and your choices. If you do not agree, please do not use the site.

Information we collect

Conversation content — Messages you send and assistant replies, including titles derived from your first message in a thread.
Account identifier — When Google sign-in is enabled, your Google account email and subject id are used to gate access and to store conversation history per user.
Session identifier — When sign-in is disabled (local dev only), a random UUID in an HttpOnly browser cookie associates your browser with stored conversations.
Technical data — Standard web server and hosting logs (for example IP address, user agent, request time) may be recorded by our cloud provider for operations and security.

How we use information

Display and persist your conversation history.
Send your messages to the configured AI provider when an API key is set, to generate replies.
Operate, secure, and improve the service.

Where data is stored

Conversation history is stored in Amazon DynamoDB in AWS (region us-west-2 for production deployments), keyed by your signed-in Google account (or by session cookie when sign-in is disabled in development). Data is not sold to third parties.

Third-party services

When configured, message content is sent to OpenAI (or another endpoint set in server configuration) to produce assistant responses. Their processing is governed by their own policies. Sign-in uses Google OAuth; Google’s privacy policy applies to that step. Do not submit sensitive personal, financial, or health information unless you accept that risk.

Retention and deletion

History is kept until you delete it using Clear all history or the delete control on an individual conversation, or until we remove it during maintenance. Clearing history removes stored conversations for your current session from our database.

Clearing browser cookies starts a new anonymous session; old sessions may remain in the database until manually purged or a retention policy is applied.

Cookies

We use essential cookies for sign-in (chat.jrog.io.auth) and, in unsigned local development, conversation session binding (chat.jrog.io.session). They are HttpOnly and not used for advertising.

Children

This service is not directed at children under 13, and we do not knowingly collect their data.

Changes

We may update this policy. The effective date at the top will change when we do. Continued use after changes means you accept the revised policy.

Contact

Questions about privacy: contact the site operator using the contact information published for your deployment, or open an issue in the project repository if you have access.