10/ Add the rest of PPQ: no accounts, email optional, pay with Bitcoin, Lightning, Monero or stablecoins. The provider that can read your prompt doesn't know who you are. PPQ, which knows how you paid, can't read your prompt. Content and identity never sit in the same place.

Replies (1)

11/ Honest limits: this covers chat today. Image, video and audio still hit our backend directly; bringing them in is next. Frontier providers like Anthropic still see your prompt, because that's where the model runs. For our E2EE models on tinfoil.sh, not even the provider does.
↑