Client-side parsing
Large exports are parsed in a browser worker before normalized statistics are uploaded.
Security
Designed around minimization and explicit consent.
AI Stats avoids raw-content cloud storage by default and keeps every authenticated query scoped to the signed-in user.
No secret storage
Imported URLs, source files, prompts, responses, and local paths are not sent to the server in stats-only mode.
Session security
Better Auth provides password hashing, HTTP-only cookies, CSRF/origin protections, and session revocation.
Share isolation
Public shares read from snapshot records, never live private account tables.