Privacy policy

What Witan is

Witan is a web tool that asks several large language models the same question and shows you their answers side by side. The models are called over the OpenRouter API. We do not host or run the models ourselves.

What we collect

When you sign in. Your email address. If you use Google or GitHub sign-in, we also receive whatever public profile information that provider releases, which is typically a display name and an avatar. All of this is stored by our authentication provider, Supabase.

Your conversations. If you are signed in and you submit a prompt, we save the resulting conversation. That includes your question, any attachments you uploaded, the response from each model on the council, and the synthesized verdict. We do not read this content. It is stored so that we can show your history back to you across devices.

Browser-local data. Your OpenRouter API key, your council selection, your custom system prompt, your reasoning effort preference, and a flag tracking whether you have used your one free anonymous run. All of this lives in your own browser via localStorage. It never leaves your machine and we have no way to read it.

Server logs. Our hosting provider keeps short-term access logs containing IP addresses, request URLs, and timestamps, the way every web service does. We do not process these for any purpose beyond debugging.

What we do not collect

Your OpenRouter API key. It is stored only in your browser and is sent directly from your browser to OpenRouter when you submit a prompt. Witan servers never see it.

The body of your model calls in transit. When you submit a prompt, your browser sends the request directly to OpenRouter. Our servers only see the conversation after the fact, if you are signed in and choose to save it.

We do not run any analytics tracking. There are no advertising cookies. We do not share data with marketing networks.

Third parties

The following providers receive data from us or from your browser:

• OpenRouter. Receives your prompts and attachments directly from your browser, plus your API key for billing. Witan servers are not in the path.
• Supabase. Stores your account and saved conversations. Subject to Supabase’s privacy policy.
• Vercel. Hosts the Witan web app. Sees standard request metadata: IP address, user agent, URL.
• Namecheap Private Email. Sends authentication emails such as your sign-in magic links.

Cookies

Witan uses one set of cookies: the session cookies set by Supabase when you sign in. These keep you logged in across page loads and expire when your session ends. We do not use any third-party tracking cookies.

Keeping and deleting data

We keep your conversations until you delete them. You can delete an individual conversation from the sidebar, or clear all of them at once from Settings.

To delete your account and everything attached to it, write to support@witan.digital from the email address on the account. We will remove your data within seven days.

Children

Witan is not directed at people under thirteen. We do not knowingly collect data from children. If you believe a child has signed up, write to us and we will remove the account.

Changes to this policy

If we change anything material, we will update the date at the top of this page. For substantive changes that affect existing accounts, we will also send an email to the address on file.

Contact

Questions about anything on this page, or about your data, go to support@witan.digital. We read every message.