Privacy

This page describes what the app does with information, based on how the code is written.

This site is operated by MLN Games.

Privacy requests: contact@contact.rostrum.site

What you type

Your goal, the conversation, and the draft contract are sent to Anthropic so the app can write the next reply and the contract. The code calls claude-haiku-4-5-20251001 for the conversation and claude-sonnet-4-6 for the contract. This page does not describe how long Anthropic keeps that data.

Email (Resend)

Sign-in codes and contract emails are sent with Resend when those features are configured. A sign-in code is stored in Redis with the email address for 10 minutes. Asking to email a contract sends the contract text and a link to the address you typed. That sender says the app itself does not store the address. Resend still receives it in order to deliver the message.

Cross-device sync, when a database is configured, emails a sign-in link through Resend and stores the address in Postgres.

Cookies

llak_uid is an anonymous id. It is HMAC-signed, HttpOnly, SameSite=Lax, and Secure in production, and it can last up to 400 days. It is used for the anonymous contract quota.

llak_session is set after a magic-code sign-in to an HMAC-signed copy of the email address, with the same cookie flags. When cross-device sync is configured, the same cookie name is used for a session id (HttpOnly, SameSite=Lax, Secure in production, 30 days).

Redis quotas

When Redis is configured (Upstash, including the Vercel Marketplace store), the app keeps counters for the daily contract total, the anonymous id, the IP address, and the signed-in email address. Chat routes are counted per hour as well. Sign-in codes live in the same store. The limits in the code are 1 lifetime contract while anonymous, 5 after email sign-in, and 100 new contracts per UTC day for everyone.

On this device

Finished contracts are saved in this browser under llak_attempts. An in-progress conversation is kept in session storage. Accountability plans, if you use them, are also stored in this browser.

Optional sync database

If DATABASE_URL is set, signed-in sync stores the email address, the session, and the contracts you choose to sync in Postgres.

Hosting

The app is hosted on Vercel.