Privacy policy
How the current application handles your information.
Summary
UncutGPT stores your account details and normal conversations so they sync across your devices, uses analytics to understand how the product is used, and sends your messages to AI providers to generate replies. Private chats are not saved to your history. We also keep limited network security records and device identifiers by default to investigate abuse and potential duplicate accounts. The sections below explain each part. Last updated 28 October 2026.
Sign-in information
Clerk handles sign-in. The application uses your verified account identifier to separate your data and shows the name, email or shortened wallet address from your session. We never see your passwords or wallet recovery phrases.
Conversations and files
Normal messages, replies, branches, saved comparisons, custom instructions, uploaded files, generated images and videos are stored in our database and file storage, hosted by Supabase, and cached in your browser for speed. Browser storage is not encryption against someone with access to your browser profile.
Removal, account closure and retention
Removing content from your account hides it from your account and removes its available browser copies. It does not erase the server copy. We retain saved conversations, comparisons, custom instructions, uploaded files, generated images and videos indefinitely, including content you remove. Closing your account disables access and ends sessions; your account information, saved content, submitted reports, acquisition information and financial records remain on our servers indefinitely. Authorized administrators can access these retained records to operate the service, investigate abuse, enforce our rules and respond to legal requests. There is no scheduled deletion date for these saved records. This does not create stored copies of private chat content or unsent browser drafts. Operational security and cache expiry periods are described separately below.
Private chats
Private chat content is not written to the conversation database or your browser history and is discarded when you leave. The AI provider still receives it to generate a reply, and short-lived operational records such as usage counts may exist. Private chat is not anonymous browsing.
AI, image and video providers
When you send a message, the conversation context and supported attachments go to the AI provider serving the model you chose, through Surplus Intelligence or, for uncensored models, Venice AI. Image generation and editing, and video generation (your prompt and any start image), use fal.ai. Each provider processes and retains data under its own terms.
Product analytics
We use PostHog for selected feature-use and operational events, linked to your account identifier and available profile details after sign-in. Automatic page-view capture, click capture, browser exception capture and session replay are disabled. Server analytics include model, timings, token counts and outcomes, never prompts or replies. Blocking PostHog in your browser does not affect the app. Security observations described below are stored separately and are not sent to PostHog.
Website analytics
Our public website pages (the homepage, guides, comparisons, blog and affiliate page, not the chat app) use Google Analytics 4 to count visits, see which pages are read and roughly where visitors come from. Google receives the page address, including any campaign tags in it, the referring site and basic browser and device details, and sets first-party cookies (_ga) to tell repeat visits apart. Ad features, ad personalization and Google signals are turned off, and no account identifier or chat content is sent. In the European Economic Area, the United Kingdom and Switzerland no analytics cookies are set; Google receives only cookieless measurements. Blocking Google Analytics in your browser does not affect UncutGPT.
How you found us
When you open UncutGPT, your browser keeps a small note of how you arrived: campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the referring website's domain but not its full address, which ad platform's click identifier was present but not its value, the first page you opened and when. We count visits by these fields together with the approximate country and device type (phone, tablet or computer), without storing your IP address or any identifier with that count. After you sign in, the first and most recent of these notes are saved to your account so we can see which channels bring people to UncutGPT. They remain after account closure, are not sent to third parties, and clearing your browser storage removes a note that has not been saved yet. Administrators also see an estimate of whether a connection used a VPN, proxy or privacy relay, derived from the network security records below; such estimates can be wrong.
Network security records
For account security, fraud and abuse investigation, we store the IP address and approximate country, region, city, network timezone, network operator/ASN, connection protocol and any available bot signals supplied by our hosting provider, Cloudflare. Location is inferred from the network and is not GPS or an exact personal location. The first connection we observe is not necessarily your original signup. When the optional IP-intelligence integration is enabled, only the IP address is sent to ipapi.is for VPN, proxy, Tor and datacenter estimates; it receives no chat content, account identity or device fingerprint. These estimates can be wrong or unavailable.
Device security checks
Device security checks run automatically when you are signed in, without a separate consent prompt or in-app opt-out toggle. For account security, fraud prevention and investigation of potential duplicate accounts, the free ThumbmarkJS library computes a browser fingerprint from browser/system, screen, language/timezone, fonts, graphics/canvas, audio-processing and hardware characteristics. It does not record microphone audio. We store a keyed hash of that fingerprint and a random browser identifier, along with limited technical fields such as browser/platform, screen dimensions, pixel ratio, CPU core count, touch capability, cookie support and the browser-reported automation flag. The library's vendor telemetry and hosted fingerprinting service are disabled. We do not collect passwords, recovery phrases, keystrokes, unrelated browsing history, contacts, precise GPS or chat content for this purpose.
Potential account associations
Authorized administrators can review shared fingerprint, browser-identifier and IP evidence to investigate suspected duplicate accounts. Shared networks and fingerprint collisions do not prove two accounts belong to one person. IP matches are limited to observations within 24 hours; other matches use retained records. Associations do not automatically merge accounts, block login or change plan limits. Administrators can record, dismiss and reverse reviewed associations with a reason. Contact uncutgpt@proton.me to question an association.
Security retention and choices
Security observations remain eligible for review for 90 days after their last observation, and expired records are removed in periodic cleanup. IP-intelligence cache entries expire within 24 hours. Browser identifiers expire after 90 days. Device and network security checks are enabled by default, including in private chat mode; private conversation content remains excluded. Contact uncutgpt@proton.me with privacy questions or requests concerning your security data. Account closure does not itself delete security observations or association reviews; operational observation expiry still applies. Administrative audit records are retained. We do not sell security fingerprints or use them for advertising.
Usage limits
We count usage per account to apply daily and paid-month allowances. Card subscriptions are processed by Dodo Payments as merchant of record: it receives your email address, name, billing address and payment details to charge you and handle taxes, under its own privacy policy, and we never see your full card number. We keep your plan, subscription status, Dodo customer and subscription identifiers and paid-period dates. If you cancel, we pass the reason you choose and any comment you add to Dodo, which keeps them with your subscription. If you request a refund, we keep the payment it's for, your reason and comment, and our decision. NOWPayments processed earlier crypto checkouts; for those we keep payment references, plan, amount, status and paid-period dates for subscription access and reconciliation. Financial records remain after content removal or account closure. Free accounts default to 5 messages and 1 image a day; current limits appear in the app. Video generation requires Plus or Super.
Developer API
If you use the UncutGPT API, we keep your API keys only as one-way hashes, plus each key's name, creation date and last use. For each request we keep the key, model, token counts, cost, status and time, to bill you and show your usage; we do not store prompts or replies. Requests go to the AI provider serving the chosen model, as described above, without the user field or any identifiers you include for your own end users. API credit purchases are processed by Dodo Payments, as described under Usage limits, and the credit history stays with your financial records.
Administrative access
Authorized administrators can review saved account information, conversations, comparisons, custom instructions, files, usage, submitted reports and security observations including potential account associations to operate the service, enforce the Community Guidelines and respond to legal requests. This includes retained content removed from user accounts and records of closed accounts. Administrative actions are logged. Private chats and unsent browser drafts are not included.
Voice features
Dictation and read-aloud use your browser's speech features, which may involve the browser vendor's services.
Your choices
You can remove or archive conversations, remove saved images, videos and comparisons, close your account in Settings, and clear site data in your browser. Removal and closure do not erase retained server records. Private chat is available for conversations you do not want saved in the conversation database. Open tabs clear available local copies when notified; other devices may retain local copies until they reconnect and synchronize, or until you clear site data. Offline devices, previously downloaded files and exports cannot be remotely erased. Clear site data on those devices to remove browser copies. Contact uncutgpt@proton.me with privacy questions or requests concerning your data.
Adults
UncutGPT is intended for adults, and the roleplay section requires confirming you are 18 or older. We do not knowingly collect data from children.