Follow The Rabbit · But Not Get Lost

Data & privacy: check what travels with your trail

This page explains how data moves through the current implementation of 寻知问兔. Local-first keeps your learning records in your own browser, but some actions still use the network.

Saved in your browser

Route maps, cards, learning profiles, sources, and revisit records are stored in this browser’s IndexedDB. Interface preferences and model settings are also stored in the browser. The project does not automatically sync across devices. Clearing site data, uninstalling your browser, or changing devices can make local records unavailable, so export backups yourself.

If “Remember the key in this browser” is checked, your API key is saved in localStorage. Otherwise, it is saved in sessionStorage, which is normally cleared when the corresponding tab closes. These storage mechanisms are not password vaults and cannot protect against malicious scripts running on the same origin. Enter your key only in a deployment you trust.

When you use AI

Generating a route map, expanding an explanation, asking a question, or creating revisit questions sends relevant goals, background, card content, or source material to your selected model provider as needed for that action. The API key authenticates the request. A direct connection sends it from your browser to the provider. If you enable the Cloudflare Worker proxy, the request and key pass through the same-origin proxy.

The project’s proxy code does not persist keys or request bodies and does not add request-body logging. The hosting platform’s access, security, and diagnostic records, and the model provider’s retention practices, still depend on their own settings and policies. This is not a promise that third parties retain no data. Do not send material you are not authorized to share.

When you read a link or PDF

Reading an article link sends the target URL to the same-origin Worker, which visits the target site and returns its content. Text is extracted from PDFs in your browser. If you then generate a route map from this material, relevant text still becomes part of the model request.

Backups and deliberate sharing

You choose when to save a JSON backup or export an HTML document. A share link encodes the exported learning journey in its URL fragment, which the browser can use to restore it. The fragment is normally not sent to this site in an HTTP request, but the complete link is visible to recipients and to applications or extensions that process it. A single-file HTML export contains readable learning content.

Sharing is not an encrypted private space. It does not provide recipient authentication, remote revocation, or access controls. Before sharing, check learning profiles, notes, and source excerpts. Keep backup files somewhere you trust, too.

Search indexing and basic access records

The public homepage and guides can be read by search engines. The workspace, share entry pages, and exported HTML are marked noindex and excluded from this site’s sitemap; noindex is an indexing instruction, not a password. It does not prevent someone with a link from reading the content.

Cloudflare serves this site. Its security and performance analytics may process access data such as IP addresses, browser details, and request times. Cloudflare account-level analytics and crawler rules are separate from this project’s source code. Local storage does not mean that visiting the site leaves no network access records.

Deleting records and getting started

Deleting a route map in the workspace or clearing browser site data affects local records. It does not recall exports already sent to others, requests retained by a model provider, or backups you saved elsewhere. Check what you have backed up before clearing data.

For the steps to use the app, read the User guide, or return to the workspace to review your current settings.