Private AI

Short answer: private AI means four separate things: no identity to sign up, no stored conversation, no third-party tracking, and a way to pay and connect that isn’t your name. Obscurify.ai does all four, which is why it takes Monero and runs a Tor onion. It does not do encrypted inference, so the model provider still sees your prompt.

“Private” is the most abused word in this category. Almost every assistant says it, and almost every one means “we wrote a policy”. A policy is a promise about the future. What follows is a checklist you can actually test, and it is worth holding any service to it, ours included.

The four things, and what we do about each

1. No identity at signup. An account is a random 16-digit number, like a Mullvad VPN account: no email, no username, no password, no phone. Only a keyed hash of the number is stored. It is also the reason the number cannot be recovered if you lose it.

2. Nothing kept. Prompts and replies are not stored on the server. Your chats live in your browser. IP addresses are deleted after 30 days, and the count is enforced, not aspirational.

3. No third-party scripts. No Google Analytics, no ad pixels, no CDN, no third-party fonts. Open dev tools and watch the network panel: nothing loads from another domain. Stripe’s own script appears only at the moment you start a card payment, because there is no way to take a card without it.

4. A way in without your name. Monero, on-chain Bitcoin, Lightning and card. Every payment is converted into blind-signed vouchers (RFC 9474) the server cannot link back to the account it funds. The whole site works over Tor at our onion address, and there is a signed monthly warrant canary.

What it does not do

• No encrypted or TEE inference. The frontier model providers still see the prompt. They are used on zero-data-retention routes, which is a contractual arrangement, not a cryptographic one. Venice offers TEE inference on Pro and we do not.
• No image, video or audio generation. Text only, plus tools.
• Not instant on IPs. 30 days, not zero.
• Not immune to payment matching. An unusual amount added once, at a known time, can be matched by amount and timing. Splitting payments across different amounts and days makes that harder.

With no account at all

Guest chat runs Llama 3.3 70b Instruct, up to 30 messages an hour, no account and no cookies. It exists precisely so that you can judge the service before identifying yourself at all — with a number, not a name.

When you want it to be truly offline

Local Mode downloads a small open model and runs it in the browser with WebAssembly. No request leaves the machine, so nothing can be logged by anyone. The tradeoff is size and speed: up to Llama 3.2 3B, about 1 token per second on a normal CPU.

Check us rather than believe us

• The warrant canary, signed monthly, and how to verify the signature.
• The no-JavaScript page: the site working with scripts off, which is the same thing a tracker would need.
• The full privacy policy, including the parts that aren’t flattering.
• How blind-voucher payments work.

If a claim here can’t be checked from outside, we say so above instead of dressing it up.

Common questions

Is there a private AI with no account?

Yes: guest chat here needs no account, no email and no cookies, with Llama 3.3 70b Instruct and 30 messages an hour. Uncensored models and the API need an account, but that account is a random number.

Do you keep my chats?

They are not stored on our servers. They live in your browser’s storage, and clearing site data removes them.

Can you link a payment to my account?

Not directly. Payments become blind-signed vouchers before they reach a balance, so the server sees a voucher, not the payment that produced it. Amount and timing are the remaining signal.

Do you use Google Analytics or pixels?

No. There are no third-party scripts and no third-party fonts on any page.

Is this enough to hide from my ISP?

Your ISP sees that you reached obscurify.ai unless you use Tor. Over the onion address it sees only Tor traffic. The model provider still receives the prompt text.

How do you pay for the servers if nobody is tracked?

By selling usage: plans from $20 a month and pay-as-you-go. No advertising, so no reason to hand your behaviour to anyone.

Last updated 2026-11-02. Plan prices and model lists on this page are read live from the site.