Updated 18 October 2026. This notice describes the current ChinaGenAI release.
Local tools
The request builder and JSON field checker process text in page memory. They do not upload the text, store it in browser storage, or make model requests. Copy and download actions happen only when you choose them.
Sign-in and site keys
Account access is currently paused on this Cloudflare release. When enabled, the console uses Cloudflare Access sign-in and a verified session token. The application uses a site-scoped account ID for access and quota records. A name or email may be displayed from the sign-in response; the application’s API tables do not store full email addresses. The hosting and sign-in providers handle their own authentication and service metadata.
Site keys are stored as cryptographic hashes with a masked prefix and expiry. The full key is returned only at creation. A replacement revokes the previous key. Keep it private.
Optional inference
When available, pressing “Run limited free request” sends your text through the site server to its configured upstream model service. External software using a site key follows the same route. Do not send confidential supplier, customer or personal material unless you are permitted to transmit it and have accepted the relevant service terms.
The application records account ID, request ID, UTC day, completion status, a conservative cost reservation, timing and token counts when returned. It does not write prompts, outputs, full keys or provider credentials to its application database. Infrastructure providers may process request and connection metadata under their own policies.
Analytics, ads and external links
Cloudflare hosting injects its Web Analytics beacon on the public site. It measures page views, visitors and browser performance. Cloudflare describes the service as privacy-first; see Cloudflare’s Web Analytics explanation for its data practices. These hosting metrics are separate from the local tools, which do not send your task text or JSON.
This release has no advertising scripts, affiliate tracking or email newsletter collection. External links take you to the named provider, whose privacy policy then applies. Future advertising or additional analytics configuration requires a corresponding update and consent handling where required.
Account data requests
The console can revoke the current site key. Self-service deletion of usage records is not offered in this release. Request and quota records currently remain until the operator removes them; no automatic retention period is promised.