Privacy
Lampway is local-first. The client talks to the server you run (by default http://127.0.0.1:8787) and, through it, to the providers you configure.
The app
- Telemetry is off by default. If you opt in, it only ever reaches the server you configured.
- Provider keys stay in your environment, a key file or the sign-in stores. They are not part of the saved provider settings and are never logged; logs are redacted.
- Prompts and images go to the provider you chose (OpenRouter, OpenAI, Anthropic, Higgsfield, a local server), under that provider’s terms.
- Sign-in tokens for ChatGPT and Higgsfield are kept in files with 0600 permissions on your machine; signing out revokes them.
This website
Static pages on Cloudflare Pages. No analytics, no cookies, no third-party scripts, no web fonts fetched from elsewhere. The one script on the site runs in your browser, switches the theme and animates the page, and sends nothing. If you choose a theme, the choice is stored in this browser only (localStorage). Cloudflare, as host, processes request metadata under its own policy.