Privacy

The option labels you type into the try-it panel are sent to the server to run it once, and are not stored or logged.

Try it

Each press runs the panel once on the server and returns the result to your browser. Nothing is kept: the runs live in the open tab only.

Signing in

You can press the panel three times without signing in. After that, Try it asks you to sign in with LinkedIn, which is free. Sign-in goes through the accounts of AI Observability Studio, our sister product, so the same account works there and on the other Open-X sites: LinkedIn shares your name, email address and profile photo with it. This site stores none of them in a database. It keeps them in one encrypted cookie on your browser, so it knows you're signed in, for 30 days or until you sign out.

To count the free presses, the site sets a small cookie holding the number, and keeps the count for a day in its server's memory under a one-way hash of your IP address, never the address itself.

The API

A session is stored so that its log can be read back: the environment and version, each tool the model called and what was passed to it, the events that fired, the decision and the outcome. A client can add a label for the participant, such as a model's name.

When a run ends, its decision is shown publicly under Live decisions on the home page: the environment's name, the decision's name and the time. Nothing else from the run is shown there: not the participant's label, not the key, not what the model wrote or passed to its tools.

A run on an environment has a record page, at an address made from its random session id, which the client links to for the person who ran it: what the environment received (each tool call and what was passed to it), what it answered, the decision, and when. Anyone with the link can open it; it is not listed anywhere or indexed by search engines. It doesn't show the participant's label, the key, or anything from the client's conversation.

The model's own words are not sent to OpenSimulations. Only its tool calls are. Nor is the prompt a client gives its model: an environment holds no story, and the client keeps its own.

API keys are kept as one-way hashes, so we can check a key but can't read it back.

Hosting

The site is hosted on Vercel, which processes connection details such as your IP address, the address requested and the time, in order to deliver and protect the site. Sessions are stored in a database hosted by Supabase.

What this site doesn't do

There is no advertising and no analytics. The only cookies are the ones above: the count of free presses and, once you sign in, your sign-in. If you install it as an app, your browser keeps one offline page on your device; nothing about you is kept in it.

Changes

If analytics are added, this page will be updated before they are switched on.