Accounts, privacy and retention
What Conflux stores and how to keep access and captured evidence safe.
On this page
Credential storage and ownership
Provider keys are encrypted at rest. Gateway keys are hashed. Administrators manage shared configuration; member keys, logs and receipts are owner-scoped. Disabling an account blocks its sessions and gateway keys without resetting its budgets.
The administrator password can be supplied on first run. An existing account is not overwritten by CONFLUX_ADMIN_PASSWORD. Keep encryption material alongside the database and outside public assets.
Request logging
Usage logs and receipts contain route metadata, statuses, latency and usage. Request bodies, tool arguments, provider secrets and raw upstream error bodies are excluded. Scheduled catalog checks do not consume generation quota.
Retention defaults to keeping all logs. Configure it in Settings to remove older metadata. Retention does not reset key budgets or remove saved credentials. Quota samples retain a recent 24-hour window.
Opt-in conversation continuity
Saved conversation history is explicitly opt-in, encrypted and scoped to a gateway key and session. It stores successful turns only, has a TTL and can be forgotten through the console. It does not carry hidden provider reasoning or guarantee recovery of partial output.
Native harness project privacy
Projects belong to the signed-in account. Task history is memory-only unless explicitly saved, then encrypted under the project’s .conflux directory with a separate local key. Source files are ordinary files. Relevant file content and tool results are forwarded to the configured model provider. Approved shell commands run with host-user permissions, not an OS sandbox; console members cannot execute them.
Share evidence safely
- Use fresh test or demo keys for every capture.
- Mask or revoke any visible secret before uploading.
- Check terminal output, config files, dialogs and video frames.
- Keep sensitive backups, the database and encryption key out of exports and deployment artifacts.
- Label synthetic metrics and edited footage accurately.