Plain-language policy
Privacy
This hosted edition is a mostly static website with no user accounts and no analytics. The only server-side part is a small showcase service on Cloudflare (a D1 database and R2 file storage) that holds the published showcase examples. It stores nothing about visitors.
The maintainer curates the showcase from a private admin page protected by Cloudflare Access, which signs them in with a one-time code sent by email. Visitors never sign in and have no accounts.
Files
When you connect a working folder, supported browsers give the site a restricted handle to the folder you chose. Generated files are written directly to that folder. They are not uploaded to the LLM Test Bench maintainers.
API keys and model requests
Provider settings, including an OpenRouter API key, are stored in your browser and may also be stored in the suite settings inside your chosen data folder. When you generate content, your prompt and selected settings are sent directly from your browser to the provider you selected. That provider's own privacy policy applies.
Generated code
Generated HTML and p5.js code runs in sandboxed previews. It can still make network requests allowed by your browser. Review generated code before sharing it or entering sensitive information into it.
The examples on the showcase are shown exactly as each model wrote them. Some load libraries or fonts from public CDNs such as cdnjs, jsDelivr, or Google Fonts when you open them, and those providers will see an ordinary request from your browser.
Screen recording
Recording uses the browser's display-capture prompt. You choose the tab, window, or screen, and the browser must ask each time. Recordings are downloaded or saved to your selected folder.
Hosting logs
The hosting provider and DNS/CDN provider may process ordinary web-server logs such as IP address, requested URL, timestamp, and browser information. Their policies apply to that infrastructure.
Questions
Use the repository's security-reporting instructions for sensitive problems. Please do not post API keys, private prompts, or personal files in a public issue.