Privacy

What we collect

When you use Dollar Store Tokens, we collect the minimum information needed to operate the service:

  • Account token: a random identifier in a cookie. No email or name, nothing that identifies you.
  • API keys: random tokens you create to authenticate API requests.
  • Token counts: input and output token counts per request, for billing.
  • Request timestamps: when each request was made, for rate limiting and billing.

We do not log prompt content, completions, or conversation history. We log token counts and metadata for billing, nothing more.

What we send upstreams

Dollar Store Tokens routes your requests through third-party proxy providers that may be in jurisdictions with no enforceable privacy obligations to you. Here is exactly what reaches them:

  • Your messages: the full content of your prompt, including system prompts, conversation history, and any attached content. This is sent verbatim to the upstream.
  • Model name: the model you requested, using the upstream's naming convention for it.
  • Parameters: temperature, max_tokens, top_p, and other generation parameters you specify.
  • Our API key: an API key authenticates the request to the upstream.
The catch: we do not pass your account token, API key, IP address, or any Dollar Store Tokens-specific identifier to the upstream. We don't use upstreams that openly advertise that they train on your data or surveil users. But even when an upstream claims they don't store anything, we can't verify that. These operators may be based in jurisdictions with no enforceable privacy obligations to you, and impossible to audit. Assume your prompts may be logged, stored, and used to train models by parties you cannot identify or hold accountable.

We mitigate exposure where we can:

Monero payments

You pay with Monero (XMR), a privacy-focused cryptocurrency. Your deposit address is a subaddress generated from our wallet, so it doesn't reveal your identity. We track deposit amounts and balances for accounting, but Monero's built-in privacy features make it difficult to trace transactions back to individuals.

We do not ask for or store your name, email, phone number, or any personally identifiable information. There is no KYC or identity verification. Account recovery via personal information doesn't exist.

Data retention

  • Request logs: per API request we keep only the model, token counts, timestamps, latency, and cost — never your prompts, completions, IP address, or headers. Kept for 14 days for billing reconciliation and your usage stats page, then aggregated and purged.
  • Billing records: kept indefinitely for accounting (token counts and amounts only, no content).
  • Account tokens: kept until you switch accounts or clear cookies. No recovery mechanism exists.
  • Prompt content: never stored. Not in logs, not in databases. It exists in memory only for the duration of the active request.

What you should assume

If your use case involves sensitive data such as source code under NDA, personal information, or trade secrets, this is a real risk, not a theoretical one. We do our best to maximize your privacy within the constraints of the architecture, but we can't guarantee what happens after your prompts leave our servers. That's the tradeoff that makes the pricing possible.