Privacy at Nexus

Plain language, kept honest. Last updated 10 October 2026.

What this place is

Nexus is a private, invite-only instance run by its owner for a small circle of people. It is not a public product, and nothing here is sold.

Your account

• Your account name is stored with a salted, slow-hashed password — never the plain password.
• Signing in creates a session so the site can recognise you. Sessions end when you sign out or they expire.

Your own API keys

If you add your own provider keys, they are stored encrypted with your password. The admin cannot read them — unlocking your vault needs your password, not the admin's.

Your chats

• To answer you, your messages are sent to third-party AI providers (for example Google, Groq, OpenRouter, NVIDIA — whichever the instance is configured to use). Those providers process your messages under their own policies, so don't send anything you wouldn't want an outside AI service to see.
• Conversation text is not stored by default. The admin can switch on conversation logging; when it is on, prompt and reply text is kept with the usage record. It is off unless the admin turns it on.

Usage records

Each request leaves a small record — time, provider, model and token counts — used for daily limits, fair use and the admin's usage analytics. The admin can see per-account usage totals and a log of admin actions. If the admin switches on conversation logging (above), the admin console also shows the first part of your most recent prompt next to your usage totals. The admin cannot see inside your personal key vault.

Backups

Encrypted copies of the instance's data are kept on GitHub so the service survives restarts and redeploys. They are ciphertext — unreadable without the passwords and keys that protect them.

Trackers and outside requests

There are no analytics trackers, no session recording and no advertising on these pages — nothing watches how you use them. Some pages load fonts from Google Fonts; as with any web resource, Google receives your IP address when your browser fetches them. Everything else the pages need — including the admin console's graphics library — is served by Nexus itself.

Your data, your call

Ask the admin if you want your account removed. Removing an account deletes it, its key vault, its saved chats and its usage history.