Privacy statement

The rule

No outbound connection happens unless your internet mode allows it and the specific operation is permitted. Every network call in the product passes through a single gate that checks your setting first. During ordinary use that gate is never reached, and the product makes no external connections at all.

Internet modes

• Offline Only: nothing connects, ever. An update check you approved is still refused.
• Ask Before Connecting, the default: the product explains why it wants to connect, asks, and connects for that one operation.
• Internet Enabled: permits the categories you have switched on. The model on the stick still writes every answer.

What is never sent

A live web search sends only the search query. Never conversation history, memory, documents, file names or identifiers. The results are handed to the model on the stick, which writes the answer. You see the exact query before approving it.

Your name and location, if you enter them, shape the assistant’s instructions on the stick. They never leave the drive.

Updates and knowledge packs

Checking for updates fetches a signed list of versions. Installing fetches the files that list names and the stick lacks. Each request carries a fixed program name and nothing else: no identifier, no query string, no cookie. The installed version is compared on the stick and never transmitted.

Nothing installs until its size, its hash and the list’s signature all verify against the key on the stick. Your folders (conversations, memory, documents, notes, output and assistants) are blocked as update targets; a package that touches them is refused whole. Every replaced file is backed up first.

World Knowledge packs are built from Wikidata (CC0) on our release machine, never by the stick.

What stays on the host PC

The product tries to leave the PC as it found it, and it is honest about the limits of that.

• The runtime unpacks about 150 MB of support files into the user profile. They are removed on exit when the default “remove temporary files” setting is on.
• A voice recording exists in the temporary folder only while it is being transcribed, then is deleted.
• Windows keeps its own traces of any program run from a removable drive (prefetch, recent items, event logs). Those are Windows’ records, not ours to remove.
• Your browser caches the page and any images you paste into a chat, as it does for any site. The page sets no storage of its own.

Verified, not assumed

On the shipping build, in Offline Only mode, a live-style question and an approved update check produced no connection from any of the product’s processes. Every process the product starts belongs to it and ends with it, so nothing keeps running after the window closes or the stick is pulled.

The drive itself

The stick is not encrypted. Anyone holding it can read what is on it. Keep it with you, and do not store passwords or other secrets on it.

This website

This site sets no cookies and runs no analytics. If you use the “tell me when it ships” form, we keep your email address, the time, and the country the request came from in our own database, and send you one confirmation email. We use the address for that single purpose, never share it, and delete it if you reply asking us to. If you buy through our checkout provider, that provider’s own privacy terms apply to the payment and shipping details you give it.

Questions: support@thestick.online.