WREXLYNPrivacy Policy
Last updated: 11 November 2026
The short version. To use the website you sign in with your name, email and an access passcode; we record your name, email and when you use Wrexlyn. Apart from that there are no analytics, no advertising and no cookies. Your chats, files and settings stay on your own device. When you ask a question, it goes directly from your device to the AI engine you chose, using your own key or sign-in. Wrexlyn does not run servers that receive your content.
Who we are
Wrexlyn Workspace (“Wrexlyn”) is made by Nishant Prabhakar. You can contact us at nishant.s.prabhakar@gmail.com.
What stays on your device
- Chats, bots, files and settings are stored in your browser’s storage (on the website and phone app) or in the Wrexlyn folder on your computer (desktop app).
- API keys you add are encrypted on your device with a key your browser cannot export (website and phone), or kept in your operating system’s protected key store (desktop). A key is only ever sent to its own engine.
- You can delete everything at any time: remove keys in Engines & keys, delete chats in the app, or clear this site’s data in your browser settings. On the desktop, delete the app’s folder.
What leaves your device, and to whom
- Sign-in (website and phone app). When you sign in, your name and email, a random ID for your browser and the app you used (phone or desktop in the browser) are sent to the Wrexlyn registry, a server we run on Render with its database hosted by Neon. Each later visit records the time of the visit. We use this only to know who is using Wrexlyn and to manage access, which is why we need it; by signing in you agree to it. It never includes your chats, files, keys or anything you ask. These servers may be located outside your country, for example in the United States. The installed desktop app does not use this sign-in and sends nothing to the registry.
- The AI engine you choose. Your messages and any files you attach are sent to that provider so it can answer — for example Anthropic (C1), OpenAI (C2), DeepSeek (D1), or a free-model provider (Groq, OpenRouter, Google Gemini, Cerebras, Mistral). Their own privacy policies and terms apply to what they receive. See the Engine ledger in the app for which engine is which.
- Website hosting. The website is hosted by Cloudflare Pages. Like any web host, Cloudflare processes technical data such as your IP address to deliver the pages and protect the service.
- Document tools. A few open-source libraries for making Word, Excel, PowerPoint and PDF files are loaded from the jsDelivr CDN the first time you use them, which means jsDelivr sees a request from your IP address. Every library is checked against a fixed fingerprint before it runs. Fonts and everything else are served by Wrexlyn itself.
- GitHub — only if you connect it and choose to publish something; you see exactly what will be sent before you confirm.
- Wrexlyn on your own PC — if you pair the website with the desktop app using its 6-digit code, the website talks to the app on your computer over your own machine’s local connection.
How long we keep it
We keep your sign-in record (name, email, browser ID and visit times) while Wrexlyn is offered, so we can manage access, and delete it when you ask us to. Visit times older than 12 months may be deleted sooner. Everything else stays on your device for as long as you keep it there.
What we don’t do
- No profiles beyond the sign-in record above.
- No cookies, tracking pixels, analytics or advertising. (The sign-in is remembered in your browser’s storage, not a cookie.)
- We do not sell, share or receive your content, and we do not use it to train models.
Your rights
Because your content is stored on your own device rather than by us, you can view, export and delete it directly in the app. To see or delete your sign-in record, email us and we’ll do it. If you have a question or a request about privacy — including under GDPR, the UK GDPR or India’s Digital Personal Data Protection Act — email nishant.s.prabhakar@gmail.com. For data held by an AI provider, contact that provider.
Children
Wrexlyn is for adults aged 18 or over (or the age of majority where you live). We don’t knowingly collect information from children; if you believe a child has signed in, email us and we’ll delete the record. The AI providers set their own minimum ages.
Security
The website runs under a strict security policy, loads no third-party scripts except the fingerprint-checked document libraries, and never puts keys in links or logs. The desktop app only listens on your own computer, and the website can use it only after you pair them; it can never change the app’s setup or keys.
Changes
If this policy changes, we’ll update this page and the date at the top.