Privacy

Sunstone North Labs LLC · effective 2026-09-09 · burton@sunstonenorth.com

The design is that your conversation, your files and your memory (the Weave) stay on your device. This page lists every case where something leaves it, and what our server keeps.

What stays on your device

Your messages, the model's replies, every file you attach, the passages and vectors the Weave builds from them, your saved session files, your settings, and the list of boxes and keys you have connected. In the browser these live in the browser's own storage for blackwindow.xyz; in the app, in its Application Support folder. We never receive them. There are no analytics, no tracking scripts, no cookies set by us.

What our server sees

Serving the page and assets. Like any web server, nginx on blackwindow.xyz logs the request path, time, and your IP address for pages, scripts and model assets it serves. These logs are kept for operations and rotated; they contain no message content.
Live lookup (off by default in the app, on by default in the browser; the header says which). When on, a factual question with no local source is sent to blackwindow.xyz/read and /search, which fetch Wikipedia or the web on your behalf. Our server sees the query, not the conversation. These endpoints are marked no-store.
vast.ai pass-through. The list of boxes for rent is vast.ai's public listing, read through blackwindow.xyz/vast/ with a read-only key of ours that never leaves the server. If you paste a vast.ai API key of your own, every request, offers and your instances, goes through the same location with your key in the header and ours is not used. That location has logging off and stores nothing; it exists because vast.ai does not answer browsers directly.

What a box or server sees

When you load a model on a box you connected (or on your own server), each prompt goes there: your message, the passages recalled for it, and attached text in play. Files and the Weave stay on your device. The page says so on every turn that runs there. A box rented through our templates reaches your browser through a Cloudflare tunnel, so Cloudflare carries that traffic in transit. The box is yours; we have no access to it.

Pairing links

A box connects to the page through a link ending in #box=… that carries the box's address and its key. Browsers never send the part after # to any server, ours included. Treat that link as a password for your box.

Third parties

Pictures, recordings and video you drop are read in the tab: the picture encoder, the speech model and the small heads and caption index they use are downloaded once (from Hugging Face and from this site) and run here; no pixel or sample leaves the browser.

Models and code are downloaded from Hugging Face and from CDNs (jsDelivr, esm.run); they see the download requests. vast.ai sees what you do on vast.ai. Cloudflare sees tunnel traffic in transit. Wikipedia and the web sites the lookup reads see the fetch from our server, not from you.

Contact

burton@sunstonenorth.com, Sunstone North Labs LLC.