Koma demo privacy notice

Last updated: 25 August 2026

Koma does not save prompts by default. A prompt is stored only when you mark a verdict as wrong, tick the sharing checkbox, and submit the feedback.

Classification

When you run Koma Gate, the prompt and selected assistant scene are sent through the Koma Cloudflare Worker to the configured LLM provider so it can produce a verdict. The current provider and model are shown with each result. This processing is necessary to provide the demo response; it does not opt the prompt into Koma's feedback database.

Optional feedback

If you explicitly share a wrong verdict, Koma stores the prompt text only.

It also creates a random deletion ID and an expiry time solely so you can delete the row and the scheduled cleanup can remove it within 30 days. It does not save the selected scene, returned verdict, expected correction, submission time, account, or network details with the prompt.

The purpose is to reproduce a wrong classification and improve Koma's tests. The legal basis for this optional storage is your consent. You can use the classifier without giving that consent.

What the feedback database does not store

It does not store the scene, verdict, correction, submission time, account, email address, cookies, IP address, or user-agent string. Cloudflare still processes network information such as your IP address to deliver and rate-limit the request. The Koma rate limiter converts the address to a keyed HMAC identifier and automatically deletes request-window data after it expires; it does not write the raw address to its storage. The configured LLM provider processes the prompt to classify it under that provider's terms and privacy policy.

Storage and retention

Opt-in feedback is stored in a Cloudflare D1 database constrained to the European Union. Each record receives an expiry time 30 days after submission and is removed by a scheduled cleanup. There is no public read endpoint for the database.

Your choices and rights

Do not submit secrets, health information, or other personal data. Immediately after saving, you can use Delete my saved feedback to withdraw consent and remove that row. If you leave the page, keep the submission ID: send DELETE /api/feedback/{submission ID}, or request access or deletion through the project's private GitHub reporting channel. Do not paste the prompt into a public issue.

Controller and contact

The Koma project maintainer, Shuang Wu, determines the purpose of the optional feedback collection. The private reporting channel above is the contact route for privacy requests.