Ask anything.
We keep nothing.
No Record is a private AI workspace with no civil-identity signup and no server-side prompt history. Local history stays in browser IndexedDB. Smart Privacy replaces implemented email, phone, IPv4, wallet, and credential patterns before a request leaves; unmatched text is sent unchanged.
┌────────────────────────────────────────────────────────────────────────┐
│ [ USER OPERATOR PROMPT ] │
└───────────────────────────────────┬────────────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────────────────────┐
│ [ BROWSER PRIVACY PREFLIGHT ] │
│ email · phone · IPv4 · wallet · credential pattern matching │
│ unmatched text remains unchanged; receipt stays local │
└───────────────────────────────────┬────────────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────────────────────┐
│ [ CLOUDFLARE WORKERS AI ROUTES ] │
│ GPT OSS 120B │ DeepSeek R1 32B │ Qwen Coder 32B │ GLM 4.7 Flash │
│ [ request content is not written to No Record storage ] │
└───────────────────────────────────┬────────────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────────────────────┐
│ [ BROWSER-CUSTODIED RESULT ] │
│ local history / galleries in IndexedDB · optional AES-GCM ciphertext │
│ server usage rows contain aggregate units only │
└────────────────────────────────────────────────────────────────────────┘>
A tangle of personal context goes in.
A minimized prompt comes out.
Smart Privacy is a browser-side pattern minimizer, not semantic entity recognition. It replaces implemented email, phone, IPv4, wallet, and credential patterns with per-request placeholders, restores matching placeholders locally, and shows a receipt. Names and locations are not separate implemented rules.
.--------------------------------------------------------------------------. | NO RECORD // BROWSER PRIVACY RECEIPT | +--------------------------------------------------------------------------+ | IMPLEMENTED MATCHES: email · phone · IPv4 · wallet · credential | | REPLACEMENTS: 3 | | INPUT DIGEST: SHA-256 (computed in browser) | | RAW STORED: false | +--------------------------------------------------------------------------+ | LIMIT: unmatched names, locations, and other semantic entities are sent | | unchanged. Minimization reduces exposure; it does not prove anonymity. | '--------------------------------------------------------------------------'
| Detected Token | Redacted Tag | Model Exposure | Local Rehydration Scope |
|---|---|---|---|
alex.private@example.com |
⟦PRIVATE_demo_0⟧ |
Pattern replaced | Volatile map |
0x71C8…3a9F |
⟦PRIVATE_demo_1⟧ |
Pattern replaced | Volatile map |
203.0.113.42 |
⟦PRIVATE_demo_2⟧ |
Pattern replaced | Volatile map |
One private layer across current routes.
No Record publishes the routes this deployment can actually invoke. Auto routing stays inside that allowlist. Council returns independent answers; Loom adds measured Lean, Balanced, Strict, and Fixed orchestration budgets.
+-------------------+
| NO RECORD API |
| /v1/chat + /loom |
+---------+---------+
│
┌────────────────────┼────────────────────┐
▼ ▼ ▼
+---------------+ +---------------+ +---------------+
| CHAT + AUTO | | LOOM BUDGETS | | MCP + CODE |
| current routes| | 1 / 2 / 3 / 4 | | scoped / local|
+-------+-------+ +-------+-------+ +-------+-------+
│ │ │
└────────────────────┼────────────────────┘
▼
=================================================================
[ CURRENT CLOUDFLARE WORKERS AI ALLOWLIST · CONTENT-FREE METERING ]
GPT OSS · DeepSeek R1 · Qwen · Llama · Mistral · GLM · Nemotron
=================================================================
NoRecord Chat
Route across frontier open models, dial reasoning, and watch Smart Privacy hide your identity anchors before any provider sees them.
NoRecord Council
Run the same minimized brief across two or three distinct current routes. Answers remain side by side; Council does not fabricate a consensus score or forced verdict.
NoRecord Loom
Lean answers in one call. Balanced escalates only on deterministic risk signals. Strict drafts, critiques, and finalizes. Fixed adds an explicit router pass.
NoRecord Code
Generate or plan code with current text routes, keep source in browser IndexedDB, and execute JavaScript inside an opaque-origin frame. Cloud containers remain unavailable.
NoRecord Image
Private image generation studio with custom aspect ratio controls. No Record does not write prompts or generated bytes to application storage; your gallery stays in browser storage.
NoRecord Video
Generative video motion synthesis with browser-local frame buffers, pan/dolly controls, and zero persistent server retention.
Smart Privacy Check
Inspect implemented email, phone, IPv4, wallet, and credential regex replacements locally before sending. The checker names its limits instead of claiming semantic PII detection.
The marketing site is not the app.
Open the deployed workspace.
Protocol 2026-08-27.2 serves private chat with in-page continuity, health-aware routing, Loom, Council, images, browser-local motion, queued local code candidates/assets/artifacts/repair, a host-sandboxed MCP App, API keys, rotating-HMAC audit/active-seat metadata, a scoped D1 retention probe, visible cooldowns, encrypted sync, and preview credits. Native iOS, desktop, and private-economy source remain labeled separately from store/installer and funding status.
+----------------------+----------------------+----------------------+ | LIVE ONLINE | SOURCE / PREVIEW | BLOCKED / NOT LIVE | +----------------------+----------------------+----------------------+ | Chat + route health | Zero-balance credits | Provider video/audio | | Loom 1–4 call budget | iOS + desktop source | App Store / installer| | Council / Images | Desktop private econ | Online funding | | Code queue + assets | x402 contract | Cloud containers | | MCP App / API / Audit| Recovery vouchers | Browser Run capacity | | Cooldown / AES sync | | | +----------------------+----------------------+----------------------+
Bring an MCP endpoint.
Keep its token in tab memory.
No Record supports inbound MCP at https://app.norecord.app/mcp and outbound Streamable HTTP connectors. Connector names, URLs, and tool metadata stay in browser IndexedDB. Bearer tokens stay in the current tab's memory.
norecord_complete and norecord_generate_image use scoped API keys. Supported methods are initialize, initialized notification, tools/list, and tools/call.
No preset Base or GitHub connector is implied. Add a public HTTPS MCP endpoint, discover its tools, and invoke them through the constrained gateway. OAuth is not implemented.
Generate with a code route.
Run JavaScript locally.
No Record Code generates or plans source with current text routes. Source persists only in browser IndexedDB. JavaScript runs in an iframe with sandbox="allow-scripts". Python can be generated as text but is not executed by this browser runtime. Cloud containers remain blocked.
brief → Smart Privacy → current code route → local source
│
▼
opaque-origin JavaScript iframe
logs + result returned to browser
Scoped keys. Current routes. Explicit boundaries.
Create a key in the workspace. Secrets use the implemented norecord_web_<prefix>_<secret> format and appear once. The chat route is OpenAI-style; image, video, Loom, sync, and other product routes use No Record schemas.
curl https://app.norecord.app/v1/chat/completions \
-H "Authorization: Bearer norecord_web_<prefix>_<secret>" \
-H "Content-Type: application/json" \
-H "Accept: text/event-stream" \
-d '{
"model": "norecord-auto",
"routing": "balanced",
"messages": [{"role":"user","content":"Review this design."}],
"stream": true
}'Privacy claims should be
narrow enough to verify.
No Record does not write prompt, response, generated media, or code-source content to its application storage. It does store content-free usage totals, quota rows, credential verifiers, and operational metadata. If encrypted sync is enabled, the server stores ciphertext, digest, vault metadata, and a version; the key stays in the browser.
Browser custody is explicit
Displayed conversations, galleries, project source, favorites, and settings stay in this browser until deleted or wiped. Sending a request transmits the selected context to Cloudflare and the selected model route. Network and infrastructure operators can still observe traffic metadata.
Minimization is not anonymity
Smart Privacy replaces five implemented pattern categories. Unmatched text is transmitted unchanged. Receipts show what the browser replaced and state rawStored: false; they are not a cryptographic proof that every sensitive entity was found.
Unavailable means unavailable
Payments are unconfigured. Credits are a zero-balance preview. Provider-generated video and audio are not exposed. Browser Run capacity and Cloudflare Containers remain blocked. The product labels these states instead of substituting simulations.
Free preview now.
Paid checkout is not live.
The deployed preview uses strict short-window and daily modality quotas. Pro, ProX, and Max are labels for future access levels, not purchasable subscriptions. The payment package endpoint currently returns an empty list.
Free
- Current text and image routes
- Adaptive Loom and independent Council
- Browser-local history, media, and code
- MCP, API keys, usage, and encrypted sync
Private credits
- Pseudonymous vault ID
- One-time rotating recovery code
- 24-hour access token
- No funding rail configured
Paid tiers
- No checkout
- No funding packages
- No entitlement handoff
- No refund workflow
Build with current routes.
Know exactly what persists.
Browser-custodied history, client-side minimization, measured adaptive inference, content-free usage rows, and explicit preview or blocked states.