Dendraft is local-first. Your thinking lives on your machine, and what leaves is your call.
Your conversations are stored on your computer. Cloud requests pass through our relay without being kept — what we record is usage numbers, not conversations. Prefer your own API key or ChatGPT account? Then the app talks to that provider directly, and that provider's privacy terms apply.
Sharing and collaboration are encrypted on your device, and the server stores ciphertext. A share link carries its key in the part of the URL that browsers keep to themselves — the key travels with the link, not with us.
Stop sharing and the server-side copy is erased on the spot. Settings lists every live link and everything still on the server, and every link expires on its own — each one shows its end date.
A one-time private card sends the model only the sentence you quoted and what you type. It lives in memory for that one exchange and destroys itself when you return to the canvas.