Lovault

Privacy

The Lovault app keeps your work on your machine. This page is about the website only: what it stores when you create an account or send a request.

Browsing

Reading this site stores nothing about you. There are no analytics, no third-party scripts and no tracking cookies. The site is served by Cloudflare, which handles the connection itself.

An account

  • Stored: your email address, your name, and a salted hash of your password (PBKDF2). The password itself is never stored.
  • The cookie: signing in sets one cookie, lvu, which only keeps you signed in. It lasts 30 days or until you sign out.
  • Not linked to the app. A website account has no access to the Lovault app or to anything on your computer.

The Thought Deployer preview

The preview linked from the account page runs entirely in your browser. What you write there is kept only in that browser's own storage; it is not sent to this site, to Lovault or to any AI.

The assistant (paused)

The website's assistant chat is switched off for now. When it returns, messages and answers will be stored with the account and sent to xAI (the Grok model) to write the answers, and this page will say so before it starts.

A request

Your name, email, organisation, the topics you ticked and your message are stored so the request can be answered by email. A request sent from a chat carries that conversation.

Where it lives, and who sees it

Everything above is kept in a Cloudflare D1 database belonging to the Lovault project. Only the founder can read it. It is not sold, not shared and not used for advertising. To stop abuse, a salted hash of your network address is kept with a request and, for up to an hour, by the rate limits; the address itself is not stored.

Your data, your call

To see what is held about you, correct it, or have it removed, send a request and tick “My account or my data”, from the email address the account uses.

Last updated 26 September 2026.