# Privacy — BrandApp Playground

> What this deployment stores, where it stores it, and what it deliberately does not collect.

- Canonical page: https://brandapp-playground.vercel.app/privacy
- Markdown: https://brandapp-playground.vercel.app/privacy.md

## What the playground stores

**BrandApp credentials you enter on `/connection`.** Sealed with AES-256-GCM and written
to the `reopt-playground-config` cookie — `httpOnly`, `sameSite=strict`, 30 days.
Plaintext never reaches cookie storage, and the cookie is readable only by this
deployment's server. Clearing it (`DELETE /api/connection`, or the reset button on the
connection page) removes it immediately.

**Session state, if you sign in with Reopt.** Better Auth issues a session cookie; the
Reopt adapter keeps the session record in Reopt's backend rather than in a database owned
by this app. Signing out ends it, and back-channel logout ends it when the Reopt session
is revoked elsewhere.

**Theme preference.** `opt-preset` and `opt-mode` in `localStorage`, read before first
paint. It never leaves the browser.

## What it does not do

- No analytics, tracking pixels, or advertising identifiers.
- No third-party scripts. The site loads only its own assets.
- No credential is ever exposed to the browser; every SDK call runs server-side.
- Public deployments never hand server environment credentials to anonymous visitors.

## Data you create in a demo

Records, files, and AI generations created here are written to **the BrandApp whose
credentials are connected** — yours, if you connected your own. They are governed by that
BrandApp, not by this site. In dev mode everything lives in an in-memory server and
disappears on restart.

## Contact

Questions about this notice: contact@reopt.ai.

## Related

- [About](https://brandapp-playground.vercel.app/about.md)
- [Contact](https://brandapp-playground.vercel.app/contact.md)
- [Connection](https://brandapp-playground.vercel.app/connection.md)

---

Index of every document: https://brandapp-playground.vercel.app/llms.txt
Single-file copy: https://brandapp-playground.vercel.app/llms-full.txt
HTTP API description: https://brandapp-playground.vercel.app/openapi.json