Privacy and controls

Use the model without becoming the dataset.

Pheme has no accounts, advertising profiles, or cross-device history. Raw questions and scenarios are excluded from first-party analytics.

Page and product eventsRoute, event ID, coarse country/region, referrer bucket, and a salted daily-rotating pseudonymous session ID derived from IP + user agent; no prompt textUp to 30 days
Monthly and daily aggregatesCounts without free-form content or a persistent visitor identifierUp to 400 days (about 13 months)
Abuse controlsIP addresses become salted, rotating request-subject hashes before rate-limit keys or alerts are storedAbout 1–48 hours
Operational model cacheHashed lookup keys; cached answers exclude the original prompt textUp to 30 days
News metadataHeadline, publisher, source URL, dates, topic, and correction statusUp to 730 days
FeedbackMessage and optional email are delivered through Resend to the operator; Pheme keeps no application-database copyDelivery-provider and operator-mailbox retention apply

External model providers

When provider-assisted reasoning or source discovery is eligible, the bounded question, scenario context, or archived story fields are sent to the configured external model provider. If semantic reasoning is unavailable, Ask publishes no replacement percentage; deterministic scenario and explorer tools remain available without claiming to interpret arbitrary prose. Pheme does not add free-form content to its analytics event store.

Feedback deletion

Pheme does not yet publish a guaranteed deletion interval for feedback held by its delivery provider or receiving mailbox. Request deletion through Feedback and include the sending address and approximate date so the operator can locate the message.

Analytics control

Turning analytics off means this browser sends no first-party analytics beacon. It does not disable essential rate limiting, feedback delivery, or a model request you explicitly submit. The preference is stored only on this device.

Turn analytics offTurn analytics on

Sharing and local history

Preset IDs may appear in a normal URL. Free-form questions and custom scenarios are never placed in query parameters or analytics. An explicit share can put readable content in the URL fragment; anyone with that link can read it. Legacy simulation recent-runs history is stored only in this browser and automatically expires.