Privacy notice

Last updated: 15 October 2026. Dopamine Cart is a fictional shopping and storytelling experience operated by the Kliir site owner. Contact: cdawei@hotmail.com.

Your browser and AI requests

Dream lives, carts and some conversation history are saved in your browser. Clearing browser storage removes those local copies and may remove your ability to revoke a shared link. When you choose an AI feature, relevant prompts, conversation context and cart details are sent to our Cloudflare Worker and its Workers AI provider. Please avoid submitting sensitive personal information. AI requests use store:false where supported; this does not guarantee the provider retains no operational data.

Verification and runtime configuration

Cloudflare Turnstile processes verification information, including network and browser signals. Our server checks the verification result and issues a signed visitor capability, valid for 30 minutes. We associate protected sessions with its random visitor identifier. Model and safety settings are read from a scoped configuration service hosted on Supabase; that service is not used to store your submitted prompts by this application.

Shares and reports

Publishing requires your confirmation and an AI safety assessment of the final content. A link is accessible to anyone who receives it; avoid publishing private information. New links expire after 30 days and can be revoked with the secret stored in your browser. Share tokens and revocation secrets are stored as hashes on the server. Expired unreported content becomes eligible for deletion after a further 30 days. Reported content is retained for review. Safety assessment receipts and durable task records remain available for investigating safety and execution problems.

Abuse prevention and limits

To limit misuse and cost, our server derives a pseudonymous identifier from your network address (your IPv4 address, or the first half of an IPv6 address) using a secret key. We do not store the address itself. The identifier groups requests for rate limits and daily AI cost limits that are shared by everyone on the same network. It is removed from cost records, and the related daily counters are deleted, after 7 days. Rate limit counters are eligible for deletion after one day.

Statistics, cost records and operational logs

Optional anonymous events contain an allowlist of fields. Installation identifiers are hashed before storage; raw prompts are not included in these event records or application logs. Event records are retained for 30 days. Short term limit records are eligible for deletion after one day. AI cost records contain request identifiers, model/configuration versions and token counts; unresolved costs and execution records are retained for reconciliation. Application operational logs may include error codes and provider request identifiers. Infrastructure providers apply their own retention policies. The public leaderboard is currently unavailable.

Your choices

You can shop manually without AI verification, decline to publish, revoke a link, clear local browser data or contact the operator about access, correction, deletion or a privacy concern. Include only the minimum information needed to identify the issue. Deletion of browser data does not automatically delete server records or already copied content.