Anonymous by default.

Effective: 2026-04-25.

The short version

WeSearch is anonymous by default. We don't ask for your real name. Your account is a random key. Your display handle ("Plain Loom 638") is generated from that key, not from anything we know about you. We don't sell data. We don't run trackers. We collect the minimum to make the service work.

What we collect

• Email at signup — used to recover your key. You can sign up with any email, including disposable. We never share it.
• API key hash — we store a SHA-256 hash, never the plaintext.
• Usage events — which resource you called, how long it took, whether it succeeded, which provider routed it. Used for billing, spend caps, and trust scoring.
• Reactions and comments — text, emoji, target URL, and the linkage to your user id (so you can delete your own).
• Server logs — IP, user-agent, requested path. Rotated within 30 days.

What we don't collect

• Real names, addresses, phone numbers.
• BYOK credentials (your OpenAI key, Tenor key, etc.) — these are forwarded to the upstream provider per request and never persisted.
• Tracking pixels, third-party analytics, fingerprinting beacons.

Cookies + local storage

We use localStorage on your device for: your API key, OG-image cache, preferred feed category, BYOK keys (browser-only), tour-completed flag, my-feeds list. None of this is sent to our servers except the API key in the Authorization header. We don't set tracking cookies.

Third parties we hand requests off to

Each WeSearch feature proxies to one or more upstream providers. When you check the weather, the request is forwarded to Open-Meteo or OpenWeatherMap; we don't share your identity, only the latitude/longitude you sent.

Your rights

• Delete your data: revoke your key in the dashboard, then email us to purge usage events older than billing cycles.
• Export: GET /v1/usage returns your full usage history.
• Comments + reactions: you can delete your own at any time via the UI or API.

Where the data lives

Currently a single droplet in DigitalOcean NYC3, SQLite (file). For Pro/Scale plans, we run replicated Postgres in the same region.

Children

WeSearch is not directed at children under 13. We don't knowingly collect data from kids.

Changes

If we change this policy materially, we'll announce it on the homepage and email registered users.

Contact

Privacy questions: use the support form.

Last revised: 2026-04-25.