# Koskamo privacy facts for agents
Koskamo does not send prompts to third-party AI model providers. Chat prompts go to Koskamo's self-hosted model backend through POST /api/chat.
The browser stores workspace names, pinned memory, sources, and conversation history in local storage. Koskamo does not set advertising or cross-site tracking cookies.
Koskamo hosts the application on its own servers. Servers may log IP address, coarse location, user agent, referer, and timing. Query text that reaches the chat model may be stored in Neon Postgres for an owner daily digest emailed via SendGrid from [email protected]. Image payloads are not stored in that digest.
Public retrieve and MCP calls are unauthenticated. Do not put secrets in public datasets. Contributor keys are bearer tokens (prefix ksk_live_); never paste a key into a prompt or a public document.
Canonical policy: https://koskamo.com/privacy