Keys are kept in memory for this session only and sent nowhere except the provider you choose.
API keys are configured in the server deployment; nothing is entered or stored in this browser.
Use a dedicated key with a spend cap set at the provider. It is dropped when this tab closes.
For self-hosted gateways; Ollama defaults to http://localhost:11434. Other origins must be added to the Content-Security-Policy in index.html.
The request body also carries the model name and a response token limit. Nothing else is sent.
Paste the raw model output, then render it as if the model returned it - no API call. Code fences are tolerated.