What It Protects Against
Frontier model providers logging your requests against your identity. The request reaches the provider with no account, API key, or network address of yours in it.What It Does Not Cover
- Retention by the provider. A frontier model runs on its maker’s infrastructure, and what the maker does with a request after answering is governed by its own terms. Retention is enforced from Private up.
- Anything in the request that identifies you. The provider reads the content. On the API, the optional
userfield is forwarded to the provider when it supports one, so keep identifying values out of it.
Picking It
Choose a model whose level is Anonymous. The Model List shows which, and the picker,/nito:models, and GET /v1/models show the same live.
When to Use It
A specific frontier model for ordinary work: prototyping, general coding questions, anything you would be comfortable sending to that model directly. For content the provider should keep nothing of, choose a model at a stronger level.Related
Privacy Levels
All four levels.
Private
Zero data retention upstream.
Choosing a Model
From the task to the right model.

