Account and data boundaries

Your models belong
to your account.

Cloud saves and snapshots require an authenticated owner. The server checks ownership on reads and writes. Public browser keys cannot query private application tables directly.

Sessions and links

Account tokens are kept in encrypted, HttpOnly cookies. Private draft and snapshot links contain random access codes; the server stores their hashes and checks expiry and revocation. Anyone with a valid link can view that particular model. Revoke it when it is no longer needed.

Safe sandbox inputs

Use fictional recipients and purchases. No real card data, identity documents or bank credentials belong in this workspace. Exports and forwarded links can reveal the content you include.

Report a problem

Email dalton.redden@getappen.com with a description and steps to reproduce. Do not email passwords or full access codes.

Current product status · Privacy