Privacy

Halvaren is an independent project run from Australia for a small group of invited adults. There is no public signup and no payment processing in this version.

An account stores an email address, a password hash, and a session cookie. The cookie is httpOnly. Message bodies, long-term memories, conversation summaries, and short moderation excerpts are encrypted on the server with AES-GCM before they are written down. Character cards are house text and are not encrypted. Logs are written without message bodies.

Moderation events store a hash of the user id, a category, scores, the action taken, and an encrypted excerpt. Reports store the reason you give and a link to the message.

If a live model is switched on, the text of a conversation is sent to OpenRouter and then to the chosen provider so a reply can be generated. Mock mode, which is the default for local use, does not send anything off the machine.

You can read and delete memories from the Memory page. Deleting the account removes the user, sessions, chats, messages, memories, reports, and moderation rows tied to that account.

Age, for this private test, is recorded because the person who issued the invite attested that they know you are 18 or over. A later vendor check is stubbed and is not active.