Privacy
What Flow stores on your device
Flow saves your settings and current story progress in encrypted cookies on your device so you can return without starting over. If you use password-protected chat, the chat history is stored briefly on Flow's server (hosted on Cloudflare) so the conversation can continue across page loads.
What happens to uploaded files and pasted text
When you generate a scene, Flow sends your prompt and any pasted or uploaded text to OpenRouter, which routes the request to the AI model you selected. Flow itself does not save uploaded files. Files are processed in memory and discarded when the request finishes. Flow keeps only a small excerpt and a running story memory, stored in encrypted cookies on your device.
What Flow cannot promise
Once your prompt and text leave Flow, they are handled by OpenRouter and the AI model provider you selected. Both have their own logging and retention policies, and Flow does not control them. Some providers may log requests, store metadata, or use content depending on your OpenRouter account settings. See OpenRouter's data-collection documentation for details.
Free model pool
When you use Flow without signing in to OpenRouter, requests run through Flow's shared free key. Free models on OpenRouter log all prompts and completions and may use them to improve the underlying models. Sign in to OpenRouter to choose models that do not log.
What you should not paste into Flow
Do not enter private student records, medical records, financial information, passwords, or other sensitive personal information. Flow is not a secure system for confidential data.
Hosting
Flow runs on Cloudflare. Cloudflare may log basic request metadata (such as IP address, timestamp, and request type) according to its own policies.
Affiliate links
Flow is a participant in the Amazon Associates Program. As an Amazon Associate I earn from qualifying purchases.
Reporting concerns about a generated scene
Each scene includes a Report this scene control. Reports are stored in encrypted server storage for 90 days, scrubbed of any account or device identifiers, and reviewed by the Flow operator. See Safety & reporting for the full flow.
Children's privacy
Flow is for general audiences and does not knowingly collect personal information from children under 13. If you are a parent, teacher, or guardian using Flow with a child, you are the one choosing what they see and what gets sent. Don't enter information that identifies a child.
Changes
This page may be updated. Significant changes will be reflected here.