We would rather hold nothing.

The interactive sandbox runs in your browser and on this site's own server routes. The task you type and the demonstration you record are used to compile a spec and a receipt for that session. We do not require an account to use it, and it touches no real third-party accounts.

If you request a founding-alpha seat, the email is appended to a local .alpha/waitlist.jsonl on the BFF that handled the form — for that single purpose. On a public deployment, wire that adapter to your mail store; until then the file is the honest store. We do not sell it.

• Chrome on Windows only. It talks only to your local BFF at 127.0.0.1:3000 — never to Kanon or Allagma from the browser.
• While armed, it records accessibility and DOM events on fixture origins (and one unlocked real origin after gates). Values are hashed before they leave the page; raw secrets are not stored.
• Screenshots are off by default in this phase. Credentials are referenced as cred://browser-session/… — the extension rides your existing login cookies.
• Traces live in extension storage and expire after 24 hours (alarm-swept). Partner metrics append to .alpha/metrics/ on the local BFF only — no cloud upload by default.
• We do not train on your work for anyone else.

Questions about data go to privacy@mymonkey.ai.