How can I help?

E2EE encrypted chat with the AI.

Cloudflare relays ciphertext · local history · browser-verified Intel attestation

ADVERTISE

Place an ad

$10 USD per 1,000 impressions.

Preview only. No ad is published, booked, or charged. Values stay in this tab; delivery is not guaranteed. No conversation-based targeting or tracking pixels.

LOCAL HISTORY

Clear local data?

This permanently removes all chats, skills, settings and downloaded local models from this browser. Offline app files are kept. Stop any running local operation first.

LOCAL CHAT

Delete this chat?

This permanently removes this conversation from this browser.

PRIVACY & ATTESTATION

How private inference works

Local, Incognito and Private TEE

Local · on-device models

The Local group in the model selector runs wllama in this browser. Model files come from Hugging Face once; offline app files and downloaded weights can then be reused without an inference server. Local chats disable search, fetching, telemetry and cloud fallback. Local history is plaintext. This does not protect against compromised devices, extensions or malicious site updates. Manage downloaded weights in Settings → Local models.

Incognito · planned

Designed for inference without recording prompt or response content in our application logs. Messages would not be end-to-end encrypted: HTTPS protects them in transit, but the relay and inference provider can read them to process your request. This is a logging policy, not a cryptographic privacy guarantee.

Incognito is not active yet. Its content-logging and provider-retention controls still need to be implemented and verified. Selecting it currently does not change inference or local chat history. Operational and billing records are separate from conversation content.

Private TEE · remote inference

This browser encrypts messages for NEAR’s model environment and decrypts replies locally. Required browser attestation checks must pass before a prompt is sent. In normal operation, Cloudflare relays ciphertext rather than chat text. This adds cryptographic protection beyond a no-content-logging policy, but protection against an actively malicious relay or compromised web origin remains incomplete.

Neither label means chat history disappears from this device. Current chats are saved locally. Optional Web Search shares plaintext queries and results with Cloudflare and Parallel. See the verification details and limitations below.

Attestation is checked before your first encrypted request.

Checked by this browser

  • Fresh 32-byte challenge and selected model identity
  • Intel TDX quote, Intel collateral, validity and TCB status using browser WASM
  • Verified quote binding to the nonce, Ed25519 model key and attested TLS fingerprint
  • Compose-manifest consistency with mr_config_id when supplied
  • Pinned selected model: z-ai/glm-5.3-flash

Verification results

Intel TDX quotePending requestNVIDIA evidencePending requestTLS fingerprintPending request

Encryption and identities

The browser converts the model’s advertised Ed25519 identity to X25519, creates an ephemeral client key, derives a key with HKDF-SHA256 using the ed25519_encryption context, and encrypts with XChaCha20-Poly1305. Browser private keys remain in memory.

Model
z-ai/glm-5.3-flash
Endpoint
glm-5-3-flash.completions.near.ai
Key fingerprint
Available after request
Checked
Not yet

Data boundary

For Private TEE chat, plaintext exists in this browser and inside NEAR’s model environment; Cloudflare relays ciphertext and operational metadata. When Web Search is enabled, opted-in queries and results are visible to Cloudflare and Parallel before the browser encrypts source context to NEAR. Conversation history is stored only in this browser.

Not independently verified yet

Private TEE chat is encrypted before the relay, but protection against an actively malicious relay or web origin is incomplete. The response-recipient key is not bound to the encrypted request, and model-origin response signatures are not verified. Web Search exposes your query to Cloudflare and Parallel. Required browser attestation checks must pass before inference.

The browser does not yet verify NVIDIA NRAS’s signing root/verdict, whether attested deployment measurements are on an authoritative approved allowlist, model-key rotation authority, encrypted response signatures, or the live same-connection TLS SPKI. Compose consistency proves that a manifest matches the verified quote; it does not prove that the deployment is approved. Evidence is relayed by Cloudflare because NEAR’s direct endpoint does not permit browser CORS, while Intel collateral is independently verified in-browser.

OPTIONAL DIAGNOSTICS

Help improve Computer?

Report this issue using only a broad failure category, duration range, device class, and Cloudflare-derived country. The analytics dataset never includes chat content, raw error details, searches, addresses, keys, ciphertext, IP addresses, or user identifiers.

Connect Wallet

Select the wallet you want to connect and sign in with.