Skip to content
WKO AI

Privacy Policy

Last updated: August 21, 2026

WKO AI is a local-first AI site. AI inference runs in your browser and we do not operate an application backend, an account database, or a cloud inference service. Limited data is still processed to deliver and secure the site, measure aggregate performance, respond to messages, and complete network actions you choose.

1. Controller and contact

WKO AI is operated by SEDER LTD, company number 17382625, registered in England and Wales. Registered office: 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE. SEDER LTD is the controller for personal data covered by this policy.

Privacy questions and rights requests can be sent to info@webkitonline.com.

2. Your AI content stays local

Prompts, chats, generated text, code, documents, document excerpts, embeddings, images, audio, transcriptions, voice recordings, model files, API keys, and settings are processed or stored in your browser. They are not sent to SEDER LTD or an application backend.

If you activate an external provider, your browser sends the data needed to perform that action directly to that provider. For example, enabling web search sends the search query and your provider API key to Tavily or Brave. WKO AI does not send unrelated files or conversation content with that request.

3. Site delivery and security

The static site is delivered through Cloudflare's global network. Cloudflare may process ordinary request and security metadata such as an IP address, requested URL, request headers, timestamp, response details, and network or device information. This processing is used to deliver the site, protect it from abuse, maintain availability, and diagnose faults.

Cloudflare provides infrastructure under its Privacy Policy and Data Processing Addendum.

4. Cookie-free Web Analytics

Cloudflare Web Analytics is enabled globally through automatic edge injection. It provides aggregate page-view and real-user performance measurements without analytics cookies, advertising identifiers, cross-site profiles, or session replay. It does not receive your prompts, files, images, audio, API keys, or generated content.

Analytics dimensions can include performance timings, country, hostname, path, referrer host, browser, device type, operating system, and navigation information. Query-string values are not included in the analytics dashboard.

Under Cloudflare's current policy, unsampled Real User Measurements are retained for seven days and aggregated afterward. Analytics dashboard data remains available for six months. Cloudflare controls the technical retention process, and its current details are available in the Cloudflare Web Analytics FAQ.

5. Functional browser storage

WKO AI uses browser storage so local tools can work and remain available offline:

  • localStorage stores settings, onboarding state, chats, image metadata, model-download choices, and optional provider configuration.
  • IndexedDB and OPFS can store generated or uploaded content, audio data, and large model shards.
  • Cache API and service-worker storage store the application shell, local fonts, static assets, runtimes, and downloaded model resources.

This storage remains on your device until you remove it or your browser does. You can delete it through your browser's site-data controls. Because SEDER LTD cannot access this local content, we cannot recover or remotely delete it for you.

6. User-initiated third parties

No model or optional API request is required merely to read the homepage. Depending on the tool and action you choose, your browser may contact:

  • Hugging Face (huggingface.co) to download selected model weights after you choose or approve a model download — including onnx-community/*, Xenova/*, studioludens/*, CoderViking/*, bukuroo/*, schmuell/* and d0gr/* image model origins, as well as chat and audio model hosts.
  • GitHub Raw and jsDelivr to download relevant open-source runtimes, model assets, or supporting libraries when a tool needs them.
  • Self-hosted WKO AI domain (/models/*) for super-resolution and OCR weights mirrored by the site and verified by SHA-256 — no additional third party receives these requests.
  • Tavily or Brave when you configure a provider API key and enable web search. The provider receives your key and search query.

These providers can receive your IP address and the requested asset or query. They process data under their own privacy terms. The site uses a no-referrer policy to limit referrer information where browsers honour it.

7. Cookies and consent

WKO AI does not use advertising cookies, behavioural tracking cookies, fingerprinting, or session replay. Cloudflare Web Analytics is cookie-free, and local browser storage is used for the functional purposes described above.

Cloudflare may set a strictly necessary security cookie, such as cf_clearance, if it performs a browser challenge or JavaScript security check. This cookie records that a security check was passed. It is not an analytics, advertising, or cross-site profiling cookie. See Cloudflare's cookie documentation.

The site does not currently display a cookie consent banner because analytics are cookie-free and any Cloudflare clearance cookie is used for necessary security.

This position will be reviewed before adding advertising, fingerprinting, marketing cookies, session-replay tools, or other nonessential browser storage. Those technologies will not be introduced without the notices and consent controls required by applicable law.

9. Sharing and international processing

SEDER LTD does not sell personal data. Cloudflare processes delivery and analytics data as our infrastructure provider. Providers you activate receive requests directly from your browser. These organisations may process data outside the United Kingdom, European Economic Area, or Saudi Arabia.

Where SEDER LTD controls an international transfer, we rely on Cloudflare's DPA, contractual safeguards, recognised transfer mechanisms, or another lawful basis appropriate to the destination and applicable law.

10. Retention

  • Local browser data remains until you or your browser deletes it.
  • Cloudflare Web Analytics retention follows the periods described in section 4.
  • Messages sent to our privacy or support address are kept only while we resolve the inquiry, then deleted unless a legal hold, active dispute, security issue, or statutory obligation requires preservation.

11. Your rights and complaints

Depending on where you live and the applicable law, you may have rights to be informed, access personal data, correct it, delete it, restrict or object to processing, receive portable data, and withdraw consent. Most AI content is available only to you through your browser and can be managed through its site-data controls.

Send a request to info@webkitonline.com. We may need to verify your identity and will respond within the deadline required by applicable law.

You may complain to the UK Information Commissioner's Office. Where the Saudi Personal Data Protection Law applies, you may also raise a complaint through the Saudi Data and AI Authority channels.

12. Changes and contact

We may update this policy when the site, providers, company details, or law changes. The date above identifies the current version. Questions can be sent to info@webkitonline.com.

SEDER LTD, company number 17382625, registered in England and Wales. Registered office: 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE.