Privacy
Most of anphuni.com is static marketing. /session is a separate capped hosted alpha lab (up to five seats). Session stores a display name, salted passphrase hash, session cookie, and workspace files on the host, and sends relevant chat/tool context to OpenRouter for model inference. It is not Mechanicall core (the local CURRENT + preflight protocol) and not open multi-tenant SaaS.
What this site does
- Serves HTML, CSS, and related static files
- Optional walkthrough demo and live compare chats (no accounts; compare uses a short-lived server proxy to a free model — messages are not kept as a user database)
- Optional You Decide concierge door — capability ticket URL (the link is the key; no login). Drop up to 8 MiB and a zip slot on that ticket. Drop, download, and draft are not a Yes. Ticket files live on the host under a self-hosted inbox; they are not a user account database.
- Optional Protocol page — authority protocol literacy
- Optional Session lab — capped hosted alpha (≤5 seats, server workspaces)
- May receive normal web-server / CDN access logs (IP, user-agent, path) from the host and Cloudflare — not an application user profile
Session (private seats · max 5)
- Hard cap of 5 seats on this host. Each seat is a separate workspace directory — files are not shared between seats.
- You claim a seat with a display name + passphrase (salted hash on server). HttpOnly cookie for session. Not open unlimited signup.
- Coding agent (Grok Build–style tools: read/list/grep/edit/allowlisted bash) runs only inside your seat folder.
- Chat text is sent to OpenRouter (default
openrouter/pareto-code) via a server proxy. The API key never ships to the browser. - Seat files live under the host data directory configured for Session (durable only if the host mounts a disk). No cross-seat reads.
- The model must not self-approve Domain decisions; CURRENT.md remains human-owned plan text.
- Sign out clears the session cookie. Operator can wipe seat data by deleting the data directory.
You Decide rooms
A room link is the key. There is no account. The room stores the messages typed there, one attached file (up to 8 MiB), and an optional zip the operator places later. That disk is in Frankfurt, Germany. The job chat is not sent to a model. Session and Compare are separate and do use a model proxy.
The side desk is separate from the job. It is not Anthony, and sending there does not accept the job. What you type into the side desk is sent to a model on the operator’s own machine, and only between 09:00 and 18:00 UK time. That text passes through the Frankfurt host on the way. The job thread is not sent with it. Outside those hours, or when that machine is off, the desk says it is closed.
The room is kept so the project you asked about can be done. It is kept until you ask for it to be deleted, or for 12 months after the last message, whichever comes first. Email anphuni@tutamail.com to ask for deletion or a copy.
anphuni is the trading name of Anthony Kizyma. An address for service is not on this site yet.
What this site does not do
- No unlimited multi-tenant SaaS / club-scale hosting
- No open registration beyond the 5-seat cap
- No contact form that writes your message to our app disk (email only if you choose to write)
- No silent whole-disk access — agent tools are jailed per seat workspace
- The old parked pipeline API is not the Session product
Project tools
Session and any local Mechanicall tools keep authority in files you own. They are not multi-tenant accounts on this domain.
History note
An earlier experimental pipeline API on this domain could store operator accounts on a private disk. That service is parked and must not be redeployed as the public apex without a separate privacy review. Production disk data from that experiment should be wiped by the operator at cutover.