Docs

Appearance

Privacy ​

This notice describes how the CharacterVault web app handles information when you use the hosted site or a self-hosted copy.

CharacterVault is open source under the GNU General Public License v3.0. This page is about privacy, not the software license.

Summary ​

  • Character cards and settings are stored in your browser (IndexedDB and related local storage).
  • CharacterVault does not provide accounts, cloud sync, or a backend that stores your cards.
  • Optional AI features send content to the provider you configure; that is outside CharacterVault’s control.
  • The NanoGPT subscription-usage check passes through a small CharacterVault proxy that does not log or store your key. See NanoGPT usage check.
  • The Creator Notes preview can load images, fonts, and styles from other sites. See Imported cards and remote content.
  • The public app is served from Cloudflare Pages; Cloudflare may process standard website access data under their policies.

Local data ​

When you create or edit characters and standalone lorebooks, data such as card fields, images, lorebook entries, snapshots, attachment links, app settings, optional custom AI context notes, and Orion/Agent chat transcripts is kept locally in your browser. It is not uploaded to a CharacterVault server, because the core app has no such server.

Custom context, chat transcripts, snapshots, and lorebook links (which library book a character uses) stay in this browser only. They are not written into PNG/JSON by themselves and are not included in vault ZIP backups. The lorebook text on the character is what card export includes — and after you link a book, that text stays matched with the library book. Clearing site data, using a different browser or device, or uninstalling browser storage for this origin can remove local data. Export cards, lorebook JSON, or a vault backup for portable copies; keep a separate copy of custom notes and chat history if you need them elsewhere.

A vault or settings backup can include API keys only if you opt in on export. Treat that file as a secret: anyone with it can use your provider quota.

Hosted site (Cloudflare Pages) ​

The official app is vault.charactervault.app. The marketing site is charactervault.app. Both are hosted on Cloudflare Pages. CharacterVault’s maintainers do not operate a separate application server for the core product.

Browser storage is origin-scoped. Cards and settings saved on an older GitHub Pages URL (spaceman2408.github.io) stay there; they do not appear on vault.charactervault.app. Export a vault backup from the old origin and Import that ZIP on the current app if you need to move a library.

Like most static sites, hosting may involve normal web request metadata (for example IP address, user agent, and requested URLs). That processing is governed by Cloudflare’s Privacy Policy, not by a CharacterVault database of user accounts.

If you run CharacterVault yourself (local build or your own host), only that host’s operators and your browser apply.

AI features (optional) ​

AI tools (Orion chat, the Agent, the AI toolbar, AI Creation Studio, and similar) only work after you configure a provider (API base URL, key, and model, or a sign-in flow such as NanoGPT where offered).

When you use those features, text and context you send (for example selected sections of a card, enabled custom context notes, chat messages, Agent catalogs and field or entry bodies it reads, or generation prompts) are transmitted to that provider so a model can respond. These requests go straight from your browser to the provider. CharacterVault does not run an AI backend in between.

  • Your provider’s privacy policy and terms apply to that traffic.
  • API keys and related credentials are stored locally in your browser settings, not on CharacterVault servers.
  • If you self-host optional helpers (for example a NanoGPT usage proxy), traffic and logs for that component follow your deployment and configuration.

NanoGPT usage check ​

There is one exception. With the NanoGPT preset, the NanoGPT Account card in Settings → AI Config checks your subscription usage automatically. NanoGPT does not allow that call from browsers, so on the official site it goes through a small proxy that CharacterVault runs on its Cloudflare hosting.

  • Your NanoGPT API key is forwarded to NanoGPT for that one request.
  • The proxy does not log or store your key.
  • The proxy only allows the subscription-usage lookup. It cannot be used for other NanoGPT requests.

All other AI requests, including chat and generation with NanoGPT, go straight from your browser to the provider.

Imported cards and remote content ​

A card’s Creator Notes can name images, fonts, or styles hosted on other sites. When the Creator Notes preview loads them, each load reveals your IP address to that site, and that you opened the card.

Settings → Character Workspace → Warn about remote content in Creator Notes preview is on by default. It shows a notice above the preview when the notes load content from other sites. It does not block the loads. Scripts in Creator Notes never run. See Creator Notes Preview.

What we do not do ​

For the standard browser app and public Cloudflare Pages build, CharacterVault maintainers do not:

  • Require an account to use core library and editor features
  • Sell your character cards or settings
  • Run a CharacterVault cloud store of your library

Third-party sites and extensions you choose to use (SillyTavern, model hosts, browsers, and so on) have their own policies.

Cookies and similar storage ​

CharacterVault uses browser storage needed to run the app (for example IndexedDB for characters, and local settings such as theme or dismissed UI hints). It is not an advertising product and does not load third-party ad trackers as part of the core app.

Children ​

CharacterVault is a general-purpose creative tool. It is not directed at children, and we do not knowingly collect personal information from children through a CharacterVault account system (there is no such system).

Changes ​

This notice may be updated as the project changes. The current version lives in the repository and on the docs site. Material changes should be reflected there when the site is redeployed.

Contact ​

Questions or concerns: open an issue on the CharacterVault GitHub repository.

This page is informational and is not legal advice.

Privacy

Copyright © 2026 spaceman2408