Plain-language policy

Privacy

This hosted edition is a mostly static website with no user accounts. The only server-side part is a small showcase service on Cloudflare (a D1 database and R2 file storage) that holds the published showcase examples. It stores nothing about visitors.

The maintainer curates the showcase from a private admin page protected by Cloudflare Access, which signs them in with a one-time code sent by email. Visitors never sign in and have no accounts.

Visit statistics

Page views are counted with Cloudflare Web Analytics. It sets no cookies, stores nothing in your browser and does not fingerprint visitors. It records which page was opened, the site that linked to it, the browser, operating system and country, and shows them only as totals. It sees nothing you do inside the apps: prompts, files, keys and generations never reach it.

Files

When you connect a working folder, supported browsers give the site a restricted handle to the folder you chose. Generated files are written directly to that folder. They are not uploaded to this site or its maintainer.

API keys and model requests

Provider settings, including an OpenRouter API key, are stored in your browser and may also be stored in the suite settings inside your chosen data folder. When you generate content, your prompt and selected settings are sent directly from your browser to the provider you selected. That provider's own privacy policy applies.

So the model picker can list what is available, the apps also load OpenRouter's public model list when they open (at most once an hour). If you have saved an OpenRouter key, that request carries it, exactly as a generation would.

Generated code

Generated HTML, p5.js sketches, games and WebXR projects run in sandboxed previews; generated Python runs in your browser through WebAssembly. Generated code can still make network requests allowed by your browser. Review it before sharing it or entering sensitive information into it.

The examples on the showcase are shown exactly as each model wrote them. Some load libraries or fonts from public CDNs such as cdnjs, jsDelivr, or Google Fonts when you open them, and those providers will see an ordinary request from your browser.

A few of Notebook Lab’s bundled tutorials and examples are about live data: they fetch recent earthquakes from the US Geological Survey, the weather from Open-Meteo, the space station’s position from a public tracking API, articles from Wikipedia, or answers from a model running on your own computer. Those requests go from your browser to that service only when you run the cell that makes them.

Screen recording

Recording uses the browser's display-capture prompt. You choose the tab, window, or screen, and the browser must ask each time. Recordings are downloaded or saved to your selected folder.

Hosting logs

The hosting provider and DNS/CDN provider may process ordinary web-server logs such as IP address, requested URL, timestamp, and browser information. Their policies apply to that infrastructure.

Questions

Use the repository's security-reporting instructions for sensitive problems. Please do not post API keys, private prompts, or personal files in a public issue.