Privacy Policy

01Overview

Orrerie is a self-hosted console for the Claude AI models. This policy explains exactly what data it handles, where it lives, and what it never does. It is written to match how the software actually works — nothing here is boilerplate.

The short version: your conversations and settings are stored as plain files on this server, tied to your account. They are not sold, not shared with advertisers, and not sent anywhere except Anthropic to generate replies.

02What we collect

Only what the console needs to function:

• Account basics — when you sign in with Google, we receive your name, email address, and profile picture from Google. Nothing else from your Google account is accessed.
• Your conversations — the messages you send, the model’s replies, and any images or PDFs you attach.
• Your settings — theme, preferences, saved personas, and default model choices.

We do not collect analytics, tracking pixels, device fingerprints, advertising identifiers, or your location.

03Where it is stored

Everything lives on this server as ordinary files under a per-account folder — conversations and personas as JSON, attachments as image/PDF files. There is no external database and no third-party storage provider.

Files are kept in a directory that is blocked from direct web access; they are only reachable through your authenticated session.

04Anthropic (the AI)

To generate a reply, the console sends your current conversation to Anthropic’s API — the company that makes Claude. This is unavoidable: it is how the AI produces answers.

Anthropic processes that request under their own privacy terms. Please review Anthropic’s Privacy Policy and Usage Policies. Orrerie is an independent project and is not affiliated with or endorsed by Anthropic.

05Payments

If you buy a plan, payment is made in cryptocurrency and processed by a payment infrastructure provider. What each side sees:

• Stored here: which plan you bought, the price, a payment reference number, the coin and network used, timestamps, and your remaining usage allowance. That is all.
• Never collected: your wallet identity, wallet balance, card numbers, or bank details — there are none involved.
• Your email address may accompany the payment for receipt/reporting purposes.
• Cryptocurrency transactions are public on their blockchains by nature; we do not link your wallet address to your identity.

06Cookies

One cookie only: a session cookie that keeps you signed in. It is HttpOnly, Secure, same-site, and holds nothing but an opaque session identifier. There are no advertising or tracking cookies.

07Your control

You are in charge of your data at all times, from inside the console:

• Export — download every conversation as a single JSON file from Settings.
• Delete a conversation — removes it and its attachments from the server permanently.
• Delete everything — clears your entire archive in one action.
• Sign out — ends your session; your data stays on the server for your next visit until you delete it.

08Security

Sign-in is handled by Google — there are no passwords for the console to store or leak. Sessions use secure, HttpOnly cookies. API responses are encrypted in transit between the server and your browser. That said, no system is perfectly secure, and this is self-hosted software provided as-is.

09Changes & contact

If this policy changes, the “last updated” date above changes with it. For any question about your data, contact the operator of this specific installation — Orrerie is run independently by whoever hosts it.