Privacy

Last updated October 13, 2026.

MoonlightC is free, open-source software. We don't sell AI and we don't sell data. This page explains exactly what happens to your information.

What stays on your device

• Your API keys, chats, modes and settings are stored in your browser's local storage on your device. If you sign in, they also sync to your account (see below).
• Chats in Private mode are never stored anywhere.
• Python you or the AI runs executes inside your browser.

What passes through our server

• When you send a message, check a key, use web tools or voice typing, your browser sends the request and the key it needs to our server, which forwards it to the provider you chose (for example Anthropic, OpenAI or Google) and streams the answer back.
• Passing a request on, we don't store or log your keys, your messages, your audio or the answers. Our hosting provider (Vercel) keeps standard request logs (time, path, status) for operating the service.

The providers you choose

Each AI or search provider you connect handles your requests under its own privacy policy. Read theirs before you connect them. Voice typing without an OpenAI or Groq key uses your browser's built-in speech service, which may send audio to the browser maker.

Accounts and usage stats

An account is optional. If you create one, we store your email or sign-in provider (Google, GitHub, Apple, Discord or Microsoft), your name, username and picture choice, your onboarding answers (what you use AI for, which tools you use, how you heard about us, an optional phone number, your starting layout), how you signed up and the campaign or site that sent you, and your country.

Signed-in usage stats record which features you use, which AI providers you connected (names only), whether a message went to a cloud or local model, your country, device type, operating system and browser, and when you used the app. They never include your messages, prompts, files or keys. In the EU, EEA, UK and Switzerland we only count anything after you say yes. Download buttons are counted anonymously.

When you're signed in, your chats (titles and messages), settings, projects and memory sync through our database (Supabase) so they show up on your other devices, and your API keys sync too, stored encrypted (Supabase Vault). Chats in Private mode, and big files or pictures you attach, stay on the device they came from.

If you share a chat, a copy of its text is stored and anyone with the link can read it, until you stop sharing it (Settings > Privacy & data). If you use remote control, we store your computers' names, app versions and when they were last online; the screen, files and commands go straight between your devices, or through a relay (Cloudflare) on networks that block direct connections, which doesn't keep them. If you add your own relay key, it's stored encrypted.

In Settings > Account you can download all your account data or delete your account, which removes everything tied to it.

Children

MoonlightC is not for children under 13.

Contact

Open an issue at github.com/robertpierson/moonlightc for privacy questions.