AI tools: privacy and how it works
This page covers only the AI tools; everything else on Nightroll is covered by the privacy page. Last updated October 4, 2026.
In short
Nightroll never sees your OpenRouter key, your prompts or the replies. The key is kept apart on ai.nightroll.app, a separate address used for nothing else, and only that address sends it to OpenRouter. OpenRouter bills your account, and Nightroll earns nothing from it.
How it works
1. You click Connect OpenRouter. You pass through ai.nightroll.app to openrouter.ai and approve there; Nightroll never sees your OpenRouter password.
2. OpenRouter sends you back to ai.nightroll.app with a one-time code, which your browser trades with OpenRouter for an API key that belongs to your account.
3. That key is saved in your browser’s storage for ai.nightroll.app only. It is not sent to Nightroll’s server, and pages on nightroll.app cannot read it.
4. When you use a tool, the page on nightroll.app hands your text to a small hidden ai.nightroll.app frame. That frame adds the key, sends the request straight to openrouter.ai and passes the reply back to the page. The key never leaves the frame.
5. Nightroll’s server only delivers the web pages and a public list of models and prices that it copies from OpenRouter every few hours.
Nightroll’s server is not in the path of AI requests
Every AI request made on this website goes from your browser straight to openrouter.ai and the answer comes straight back. It never passes through Nightroll’s server, so the server cannot see, store or log what you ask or get back, and restarting or updating it cannot interrupt a request in progress. The server only delivers the pages and the public model list, and keeps anonymous counts: page views, and for each AI tool how many requests were started and how they ended (finished, failed or stopped). Those counts contain the tool and the outcome only: nothing about your text, files, pictures, the model or your key, no IP addresses and no cookies.
Where your key lives, and the main risk
The key is in your browser’s local storage for ai.nightroll.app. Browsers keep each address’s storage separate, so scripts running on nightroll.app pages, ads included, cannot read it. Anything that controls your browser profile still could: malware on your computer, a malicious browser extension, or someone using your computer. That is the main risk. On a shared computer, disconnect when you are done.
Your results are saved in this browser
So that nothing you pay for is lost when you leave or reload a page, every result (text, pictures, conversations) is saved in this browser the moment it arrives, even while it is still being written, under “Saved results” on each tool. They are kept for 30 days, up to 200 results, and the oldest are removed first; you can delete any of them, or all of them in the AI settings. They are stored for nightroll.app on this device only and never sent anywhere. Like anything shown on these pages, scripts running on them (including Google’s ad script) could technically read them, so delete results you consider sensitive. Some browsers (notably Safari) clear site data after a few weeks without a visit: download what you want to keep.
Why the key has its own address (ai.nightroll.app)
The AI tool pages show ads, and ad scripts run on the page that shows them. If the key were stored on nightroll.app, those scripts could in principle read it. So the key lives on ai.nightroll.app instead, which serves one tiny page with no ads and no outside scripts: the key frame. It is allowed to run only its own code, to talk only to openrouter.ai, to be embedded only by nightroll.app, and it answers only nightroll.app’s pages. What it cannot prevent: a script on a tool page could ask the frame to make requests while the page is open, which would use your credit but never reveal the key. A credit limit on the key, set on OpenRouter’s keys page, caps that.
How the AI pages are protected
The tool pages are served with a strict security policy: they run only Nightroll’s own scripts and, when ads are shown, Google’s ad scripts. They can embed only the key frame and Google’s ads, connect only to nightroll.app and Google’s ad services, cannot be embedded in other sites, and send no referrer.
Ads
Like the rest of the site, these pages may show ads from Google AdSense, which keeps the tools free. Google’s ad script runs on the tool page, never on ai.nightroll.app, so it cannot read your key. Google’s use of data for ads is described in the site’s privacy page.
Disconnecting and revoking access
Disconnect removes the key from this browser. To cancel the key itself, delete it on OpenRouter’s keys page; it then stops working everywhere. You can also give the key a credit limit there.
Messaging (ntfy, Twilio, SendGrid)
The messaging tools keep your ntfy token, Twilio credentials and SendGrid key on the same key page as your OpenRouter key: typed there, stored in this browser, never shown on Nightroll’s pages. Push notifications go from your browser straight to ntfy.sh and text messages straight to Twilio; Nightroll’s server never sees them. Email is the one exception: SendGrid does not accept requests from browsers, so each email and your SendGrid key pass through Nightroll’s server on their way to SendGrid. The server forwards them at once and keeps nothing (no addresses, text or key, not even in logs); it only counts how many emails were sent or failed, and limits how many can be sent. ntfy, Twilio and SendGrid have their own privacy policies and keep their own records of what you send.
What happens after your request leaves your browser
Nightroll keeps nothing, so the site stays light and has nothing to leak. But your prompts and images do go to OpenRouter and to the provider of the model you choose, and Nightroll cannot make any promise about what they collect or how long they keep it: their own terms and data retention rules apply (OpenRouter’s privacy policy, and each provider’s policy). The setting “Only use providers that don’t store or train on my prompts”, on by default, asks OpenRouter to route your requests only to providers with that policy, but OpenRouter may still keep its own records. Don’t send anything you would not share with them.
Money
Nightroll makes $0 from the AI tools: no subscription, no markup, no referral fees. You pay OpenRouter’s prices for the models you use; OpenRouter charges its own fee when you buy credit.
Contact
Questions: [email protected].