Privacy Policy

WaxFrame is built so that your private data stays private by design — not by promise. There is no server to send it to. This page explains exactly where your data lives, the one narrow exception, and what the third-party services you connect can see.

Effective May 25, 2026.

The short version

No backend, no database, no tracking

WaxFrame has no application server and no database. The entire app runs in your browser. There is no WaxFrame account to create, and no analytics, telemetry, advertising, or cookies for tracking. Because there is no server collecting anything, there is nothing for WaxFrame to sell, share, or leak.

The one piece of data that ever leaves your browser to a service operated by WaxFrame's developer is Claude traffic, which passes through a relay that does not log or store it. That single exception is detailed below.

What WaxFrame stores, and where

Everything stays in your browser

Your API keys, your projects, your documents, your session history, and your preferences (theme, mute, hive setup) are stored locally in your browser using localStorage and IndexedDB. This data is per-browser-profile and per-machine: what you save on your work laptop does not appear on your phone, and clearing this site's browser data removes it.

This local data is not encrypted at rest. Any code or browser extension running in the same browser profile that can read your storage can read it — the same threat model as any site-scoped browser storage. On shared or untrusted devices, use a separate browser profile or clear site data when you finish.

Where your data goes when you run the hive

Directly to the AI providers you choose

When you run a round, WaxFrame sends your prompt and document text from your browser straight to the AI providers you have configured — OpenAI, Google, xAI, Mistral, Perplexity, Cohere, Together AI, DeepSeek, and any custom or server-based endpoints you add. Your API keys are sent only with those requests, only to those providers.

Each provider receives, processes, and handles that data under its own privacy policy and terms — not WaxFrame's. What a provider does with your prompts and documents (including whether it retains them or uses them for training) is governed by your agreement with that provider. Review each provider's policy before sending sensitive content.

The one exception — Claude

Anthropic's API does not currently allow direct browser requests (no CORS), so Claude traffic routes through a small Cloudflare Worker operated by WaxFrame's developer at waxframe-claude-proxy.weirdave.workers.dev. The Worker forwards your request straight to Anthropic and does not log or persist your API key or prompt content — but it necessarily sees them in transit while forwarding. This relay exists only to satisfy the browser's CORS requirement; it adds no storage and no analytics.

Every other provider connects directly browser-to-provider with no WaxFrame intermediary.

Buying WaxFrame Pro

Payments are handled by Gumroad

WaxFrame Pro licenses are sold through Gumroad. Your payment details and purchase information are collected and processed by Gumroad under its own privacy policy — WaxFrame never sees or stores your payment information. After purchase, your license key is stored locally in your browser and verified against Gumroad's license API when you activate Pro. WaxFrame keeps no record of who owns a license.

Hosting

Static hosting on GitHub Pages

The WaxFrame site is served as static files via GitHub Pages at waxframe.com. As with any web host, GitHub may record standard technical request data (such as IP address and user agent) in its own server logs under GitHub's privacy practices. WaxFrame adds no tracking on top of this and receives none of that log data.

Your control

You hold all of it

Because your data lives only in your browser, you control it completely. Clear this site's browser data to erase everything WaxFrame has stored locally, including your saved API keys. Revoke an API key at the provider's console at any time to cut off access. WaxFrame is fully open source under AGPL-3.0, so every claim on this page is independently auditable in the source.

Children

WaxFrame is a developer/productivity tool and is not directed at children under 13. It collects no personal information through any server, because it has no server.

Changes & contact

If this policy changes, the effective date above will be updated and the change will appear in the public repository history. Questions or concerns? Open an issue on GitHub — that is the contact channel for WaxFrame.

See also the Terms of Use and the full API Key Guide for the technical disclosure on key storage.

Open Source & Privacy

WaxFrame is fully open source under the AGPL-3.0 license. Every line of code is public and auditable.

No Backend WaxFrame has no database or app server. Everything runs in your browser. Your documents and session data live in your browser only — they never sit on a WaxFrame server because there isn't one.
No Tracking No analytics, no telemetry, no cookies, no accounts. Nothing is tracked.

Read the full Privacy Policy and Terms of Use, or read the source on GitHub →

WaxFrame

About

Version
LicenseAGPL-3.0 — open source, free to use and modify with attribution. Read license →
AuthorR David Paine III — weirdave.com
TestingCandy
StackVanilla HTML, CSS, JavaScript — no frameworks, no server, no install required.

Built with ❤️ by WeirDave and Claude.

WaxFrame Pro

Enter your license key to continue.

Don't have a key? Buy WaxFrame Pro →

Manage License

Your WaxFrame Pro license is active.

••••••••-••••••••-••••••••-••••••••