A PRIVATE PLACE
TO THINK.
Your history stays in this browser. Before a request leaves, Smart Privacy masks supported patterns and shows a local receipt. No Record stores content-free usage totals—not prompt or response text.
A tangle of personal context goes in.
A minimized prompt comes out.
Smart Privacy is a browser-side pattern minimizer, not semantic entity recognition. It replaces implemented email, phone, IPv4, wallet, and credential patterns with per-request placeholders, restores matching placeholders locally, and shows a receipt. Names and locations are not separate implemented rules.
.--------------------------------------------------------------------------. | NO RECORD // BROWSER PRIVACY RECEIPT | +--------------------------------------------------------------------------+ | IMPLEMENTED MATCHES: email · phone · IPv4 · wallet · credential | | REPLACEMENTS: 3 | | INPUT DIGEST: SHA-256 (computed in browser) | | RAW STORED: false | +--------------------------------------------------------------------------+ | LIMIT: unmatched names, locations, and other semantic entities are sent | | unchanged. Minimization reduces exposure; it does not prove anonymity. | '--------------------------------------------------------------------------'
| Detected Token | Redacted Tag | Model Exposure | Local Rehydration Scope |
|---|---|---|---|
alex.private@example.com |
⟦PRIVATE_demo_0⟧ |
Pattern replaced | Volatile map |
0x71C8…3a9F |
⟦PRIVATE_demo_1⟧ |
Pattern replaced | Volatile map |
203.0.113.42 |
⟦PRIVATE_demo_2⟧ |
Pattern replaced | Volatile map |
One privacy boundary.
Models are replaceable.
Auto routes by task and live health inside the current allowlist. Economy selects the lowest-priced catalog route. The workspace publishes route status, context, and verified token prices instead of hiding provider economics.
+-------------------+
| NO RECORD API |
| /v1/chat + /loom |
+---------+---------+
│
┌────────────────────┼────────────────────┐
▼ ▼ ▼
+---------------+ +---------------+ +---------------+
| CHAT + AUTO | | LOOM BUDGETS | | MCP + CODE |
| current routes| | 1 / 2 / 3 / 4 | | scoped / local|
+-------+-------+ +-------+-------+ +-------+-------+
│ │ │
└────────────────────┼────────────────────┘
▼
=================================================================
[ CURRENT CLOUDFLARE WORKERS AI ALLOWLIST · CONTENT-FREE METERING ]
GPT OSS · DeepSeek R1 · Qwen · Llama · Mistral · GLM · Nemotron
=================================================================
NoRecord Chat
Route across frontier open models, dial reasoning, and watch Smart Privacy hide your identity anchors before any provider sees them.
NoRecord Council
Run the same minimized brief across two or three distinct current routes. Answers remain side by side; Council does not fabricate a consensus score or forced verdict.
NoRecord Loom
Lean answers in one call. Balanced escalates only on deterministic risk signals. Strict drafts, critiques, and finalizes. Fixed adds an explicit router pass.
NoRecord Code
Start with a private brief, then move into a split source-and-output editor. Projects, files, runs, and generated source stay in browser IndexedDB; JavaScript executes inside an opaque-origin frame.
NoRecord Image
Private image generation studio with custom aspect ratio controls. No Record does not write prompts or generated bytes to application storage; your gallery stays in browser storage.
NoRecord Video
Generative video motion synthesis with browser-local frame buffers, pan/dolly controls, and zero persistent server retention.
Smart Privacy Check
Inspect implemented email, phone, IPv4, wallet, and credential regex replacements locally before sending. The checker names its limits instead of claiming semantic PII detection.
The marketing site is not the app.
Open the deployed workspace.
Protocol 2026-08-27.2 serves private chat with in-page continuity, health-aware routing, Loom, Council, images, browser-local motion, queued local code candidates/assets/artifacts/repair, a host-sandboxed MCP App, API keys, rotating-HMAC audit/active-seat metadata, a scoped D1 retention probe, visible cooldowns, encrypted sync, and preview credits. Native iOS, desktop, and private-economy source remain labeled separately from store/installer and funding status.
+----------------------+----------------------+----------------------+ | LIVE ONLINE | SOURCE / PREVIEW | BLOCKED / NOT LIVE | +----------------------+----------------------+----------------------+ | Chat + route health | Zero-balance credits | Provider video/audio | | Loom 1–4 call budget | iOS + desktop source | App Store / installer| | Council / Images | Desktop private econ | Online funding | | Code queue + assets | x402 contract | Cloud containers | | MCP App / API / Audit| Recovery vouchers | Browser Run capacity | | Cooldown / AES sync | | | +----------------------+----------------------+----------------------+
Bring an MCP endpoint.
Keep its token in tab memory.
No Record supports inbound MCP at https://app.norecord.app/mcp and outbound Streamable HTTP connectors. Connector names, URLs, and tool metadata stay in browser IndexedDB. Bearer tokens stay in the current tab's memory.
norecord_complete and norecord_generate_image use scoped API keys. Supported methods are initialize, initialized notification, tools/list, and tools/call.
No preset Base or GitHub connector is implied. Add a public HTTPS MCP endpoint, discover its tools, and invoke them through the constrained gateway. OAuth is not implemented.
Generate with a code route.
Run JavaScript locally.
No Record Code generates or plans source with current text routes. Source persists only in browser IndexedDB. JavaScript runs in an iframe with sandbox="allow-scripts". Python can be generated as text but is not executed by this browser runtime. Cloud containers remain blocked.
brief → Smart Privacy → current code route → local source
│
▼
opaque-origin JavaScript iframe
logs + result returned to browser
Scoped keys. Current routes. Explicit boundaries.
Create a key in the workspace. Secrets use the implemented norecord_web_<prefix>_<secret> format and appear once. The chat route is OpenAI-style; image, video, Loom, sync, and other product routes use No Record schemas.
curl https://app.norecord.app/v1/chat/completions \
-H "Authorization: Bearer $NO_RECORD_API_KEY" \
-H "Content-Type: application/json" \
-H "Accept: text/event-stream" \
-d '{
"model": "norecord-auto",
"routing": "balanced",
"messages": [{"role":"user","content":"Review this design."}],
"stream": true
}'Privacy claims should be
narrow enough to verify.
No Record does not write prompt, response, generated media, or code-source content to its application storage. It does store content-free usage totals, quota rows, credential verifiers, and operational metadata. If encrypted sync is enabled, the server stores ciphertext, digest, vault metadata, and a version; the key stays in the browser.
Browser custody is explicit
Displayed conversations, galleries, project source, favorites, and settings stay in this browser until deleted or wiped. Sending a request transmits the selected context to Cloudflare and the selected model route. Network and infrastructure operators can still observe traffic metadata.
Minimization is not anonymity
Smart Privacy replaces five implemented pattern categories. Unmatched text is transmitted unchanged. Receipts show what the browser replaced and state rawStored: false; they are not a cryptographic proof that every sensitive entity was found.
Unavailable means unavailable
Payments are unconfigured. Credits are a zero-balance preview. Provider-generated video and audio are not exposed. Browser Run capacity and Cloudflare Containers remain blocked. The product labels these states instead of substituting simulations.
Free preview now.
Marginal-cost routing next.
The operating target is usage-priced access built from published route costs, not hidden model bundles. Today the deployed preview uses strict free quotas; paid checkout and funding remain disabled.
Free
- Current text and image routes
- Adaptive Loom and independent Council
- Browser-local history, media, and code
- MCP, API keys, usage, and encrypted sync
Private credits
- Pseudonymous vault ID
- One-time rotating recovery code
- 24-hour access token
- No funding rail configured
Paid tiers
- No checkout
- No funding packages
- No entitlement handoff
- No refund workflow
Build with current routes.
Know exactly what persists.
Browser-custodied history, client-side minimization, measured adaptive inference, content-free usage rows, and explicit preview or blocked states.