What we store
quotum.org sets no cookies and runs no advertising or visitor analytics. This page lists what the site keeps in your browser, what our servers keep, what is public on the chain, and how to clear each. It describes the site as it runs today.
In your browser, on this device
The site keeps these in the browser's own storage. They are the browser's copies: the sign-in token goes with your requests to the keeper, and the text of a chat is sent when you make a request. Clearing site data for quotum.org in the browser removes all of them and signs you out.
| What | Where | How long |
|---|---|---|
| Your seat sign-in | sessionStorage, quotum-seat-token | This tab, until you close it or sign out |
| The PAYG console session and cabinet | sessionStorage, quotum-payg-console-session, quotum-payg-cabinet | This tab |
| That you signed out of the header's account button | sessionStorage, quotum-header-out | This tab |
| The last read of the seals page and of a seal lookup | sessionStorage, quotum-record-top-last-read, quotum-record-lookup-last-read | This tab |
| Chats, drafts and the chosen thread, per seat, PAYG wallet or day key, only while Save chats on this device is on in the seat console's Details | localStorage, quotum.chat.* | Until you delete the thread, switch saving off, or clear site data |
| Console preferences, recent models, the check page's history and the newest release you saw on the log page, only while Remember my settings is on | localStorage, quotum.chat.*.prefs, quotum.chat.*.models.*, quotum.chat.*.checks, quotum.log.seen | Until the switch goes off or site data is cleared |
| The two switches themselves | localStorage, quotum.keep | Until cleared |
| The seat console's remembered tab, only while Remember my settings is on | localStorage, quotum.seat<N>.tab | Until the switch goes off or site data is cleared |
| Your language and the models page view | localStorage, quotum-lang, quotum-ch2-model-mode | Until cleared |
| The contract check history on the check page | localStorage | Until cleared |
| Your ballot receipt on the governance page, per vote manifest | localStorage, qgov:<manifestHash> | Until cleared |
Both switches are off until you turn them on, in Details on the seat page. With saving off the console keeps a chat only in this tab; threads saved earlier still show and go when you delete them or switch saving off. New chat starts a fresh thread and clears the draft. The language stays until site data is cleared. No IndexedDB, no cookies.
Your requests
A request from the seat console, a day key page, the check page or the call goes through quotum.org to Venice, so the keeper can meter it against the key's cap. In E2EE mode the request goes from your browser to Venice directly. The keeper records the time, the seat, the model, its privacy label, the cost and a hash of the provider's request id, never the text of a prompt or a reply. A key copied into another app calls Venice directly and leaves no record here. Venice states that it keeps no prompt or reply for private models; that is the provider's retention policy, not something quotum can verify.
What our servers keep
The keeper keeps the receipts of every session (seat, spend, cap, the bell, the tx), the call journal described above, PAYG accounting (balances, top-ups, request charges, refunds) and the technical logs any server keeps to run and to resist abuse: request times, paths, status codes and the address a request came from. Receipts and accounting are kept for as long as the service runs, because every bell is checked against them. Technical logs are kept to run the service; the retention period will be stated here once the operator sets it.
On the chain
Taking or leaving a seat, staking, the bell's buy and burn, the call's seals and the seals page are transactions and logs on Robinhood Chain. They are public by nature, tied to a wallet address, and quotum cannot remove them.
Payments privacy
pay.quotum.org verifies and settles API payments. It runs no browser scripts and sets no cookies. To settle a payment, resist abuse and resolve a dispute it processes the payment details, the wallet address and the technical request records. Settlements on the chain are public.
Who to ask
quotum runs the site and the keeper. Questions about anything on this page, or a request to see or remove what the keeper holds about a wallet or a key, go to hello@quotum.org. The terms say what a key is and is not.