Your data matters.

.paletta uses a Cloudflare Worker and a SQLite-backed Durable Object to store registered email addresses, verified account status, password hashes, session records, credit balances, credit ledger entries, and purchase identifiers. Your password is not stored in plaintext.

Chat and project history

Your conversation history and project names are saved in this browser’s local storage, not synced across devices. You can clear local data in Account settings. When you submit a prompt, it is processed by Cloudflare Workers AI to generate the response.

Sign-in and payments

When configured, Google, Microsoft, or Apple handles social sign-in, Resend handles email verification delivery, and Stripe handles checkout/payment processing. .paletta stores purchase identifiers and credit transactions, not card numbers. Cloudflare and these service providers may process operational data according to their policies.

Control and launch status

This is an initial product notice and should be replaced by a reviewed privacy policy before a public commercial release. The app does not yet provide self-service cloud account deletion or password reset; establish customer support and those account flows before accepting live users or payments. Do not submit secrets or private code you are not authorized to share.