Trust · Local First
Privacy & Local Data
What Atlas of Names stores locally, what the anonymous event aggregate excludes, what a deliberate contact report stores, and how to remove data.
Product owner and release accountability: Will Hu · Implementation and automated evidence: Manus AI · Updated · Independent human naming-quality reviewer pending
Default data route: briefs, generated names, favorites, edits, notes, imported files, and clipboard content remain in the browser. Base generation has no AI API and no account requirement.
Local data map
| Data | Purpose | Location | Removal |
|---|---|---|---|
| World brief | Reuse naming constraints | IndexedDB in this browser | Clear Board or site data |
| Saved names and notes | Board and conflict detection | IndexedDB in this browser | Remove, undo, replace import, or clear site data |
| Current generation controls | Create one batch | In-memory component state | Reload or close the page |
| Settings share link | Reopen seed and named controls | URL copied by the user | Delete the link; briefs and results are excluded |
| Exports | User-controlled transfer | Device download folder | Delete with device controls |
| Contact report | Investigate a correction, barrier, privacy issue, or rights request | Controlled server queue, only after explicit form submission | Automatically removed after at most 180 days |
Anonymous event aggregate
The site counts generation starts, successes, failures, constraint recoveries, copy, favorite, export, share, and Board-add actions in daily aggregates by public route, tool, named mode, action status, export format, and summed local action latency. It does not store IP address, user agent, referrer, cookie identifier, session identifier, brief, generated name, seed, Board content, email, or free text. Aggregates expire after 90 days and are accessible only through an owner-authorized export endpoint.
Network boundary
Generation remains in the browser. An action sends only the disclosed aggregate dimensions; it never sends generated content. A Contact submission is separate, deliberate, and contains only the fields entered in that form. Normal browser requests still reveal connection metadata to the host for delivery and security, but the application does not persist IP or user agent in its analytics tables.
Future cloud features
Any future account, synchronization, advertising, cross-site tracking, or AI enhancement must disclose processor, purpose, region, retention, training status, cancellation, and deletion controls before content leaves the browser.
Known limits
Similarity is an editorial signal rather than trademark, copyright, linguistic, cultural, or identity clearance. Pronunciation is an English-readable approximation rather than IPA. The site does not claim cultural authenticity, legal availability, uniqueness, ranking performance, or human review that has not occurred.
Report and revision
Use the persistent contact and correction form to submit the route, generated result, seed, engine version, observed problem, and requested correction. It returns a public reference and status URL. Will Hu reviews correction and rights reports within five business days.