Skip to main content
Short answers on what is private and what is not. The full treatment is in the Privacy section.

​
Does using the plugin send my prompt to my harness’s model provider?

It depends on the command. A plain ask runs inside your harness conversation, so your harness can see that prompt. private is the command built to keep a turn out of your harness’s upstream entirely. See Ask and Private.

​
What does Private actually guarantee?

A private turn is not sent to your harness’s own model provider. What it does not do is turn off local disk writes or act as a sandbox by itself. The Private page spells out exactly what is and is not covered.

​
What are the privacy levels?

Anonymous, Private, Confidential, and Encrypted. The level follows the model you choose and never silently downgrades. Three of them work in this release; Encrypted is coming soon to the plugin. See Privacy Levels at a Glance and The Four Levels.

​
Can I verify the privacy claim myself?

Yes, for the attested levels. A Confidential call runs in a sealed environment and returns evidence you can verify independently, rather than asking you to take the claim on trust. See Verify It Yourself.

​
What does Nito keep about my prompts?

By default, metadata only. Prompts, completions, reasoning, tool payloads, and attachment contents are treated as request-local and are not persisted by Nito. What the model provider keeps is a separate question: at Private and above the provider is held to zero data retention, and at Anonymous it handles the request under its own terms with your identity detached. See Data Retention and Visibility.