---
title: "Privacy at Barestate"
description: "How the Private AI workspace handles data — privacy preview, redaction, and what leaves your machine."
canonical: https://barestate.xyz/privacy
---

# Privacy at Barestate

Your words, your boundary. Barestate is built around a simple rule: you should be able to see what leaves your machine before it leaves. This page describes what the site and workspace handle today.

## This website

The marketing pages store your appearance choice (Daylight or Afterglow) in your browser's local storage. The site loads Privy for authentication and wallet connections. Cloudflare hosts the site and handles network requests; these services have their own data practices.

The workspace keeps BYOK keys in browser memory for the tab only. They are sent to the app server only inside the approved request and are never written to browser storage by this app.

## Private AI workspace

Preview sends your draft to the app server for scanning; it does not call a model provider. Detected personal information becomes placeholders and detected secrets are withheld on the server. You inspect the exact JSON request before send approves it.

The app server sees the original draft, and the selected provider reads the cleaned request. Detection is fallible — inspect it before sending sensitive material. This is not anonymity or end-to-end encryption.

## On-device models

Atom grounding runs locally in Barestate Orb, the native Mac app. Screenshots and target instructions do not need a cloud model, and temporary screenshot files are removed after the step. External agent connections carry their own data boundaries.

## Questions

See the [contact and research resources](https://barestate.xyz/contact) for published information. The [Private AI workspace](https://barestate.xyz/app) shows the cleaned request before sending so you can inspect the information it contains.

[Home](https://barestate.xyz/) · [About](https://barestate.xyz/about) · [Contact](https://barestate.xyz/contact)