Your hideout. Explained.

What this local version of Goblinz stores and how your account works.

An account without email

No email address or password is requested. A random 16-digit number grants account access. The server stores a protected fingerprint and the last four digits, never the full number. A nickname is optional.

Your number is your key

The number appears once when you create your account. Copy or download it then: it cannot be retrieved later. Anyone with that number can access your account. Your session uses an HTTP-only cookie valid for seven days.

Conversations and usage

Conversations, balances, test invoices and API keys are linked to your account and stored on the machine hosting this site. Conversations are not encrypted on disk in this prototype. Not asking for an email does not guarantee anonymity.

External services

No messages are sent to an AI provider and no real payments are made. Responses are generated locally to test the experience. A message drafted before signup is temporarily kept in the tab so you can retrieve it after logging in.

You are in control

Account settings let you export data, delete conversations and close other sessions. API keys can be revoked in the API workspace. Data persists until deleted. Existing accounts keep their data; migrating to an account number removes the old email and password hash.