MODEL FINDER / SECURITY

Keep your data close.

Processing boundary

Usage imports, memory estimates, prompt generation, and cost calculations run in your browser. There are no application network calls, account connections, API-key fields, tracking scripts, or persistent data storage. Opening pages and downloading files still sends normal hosting requests to GitHub Pages.

Import protections

JSON imports are limited to 2 MiB and 10,000 records. Required fields and numeric ranges are validated. Model names and other imported values are inserted as text, never interpreted as HTML. Import failures preserve the previous dataset. Reload or Clear removes the dashboard dataset from application memory.

Browser controls

Pages restrict resource loading with a Content Security Policy, disable form submission to external destinations, and suppress referrer information. Scripts and styles are served from this site; no third-party libraries are loaded. These measures reduce risk but do not establish that the product is immune to vulnerabilities.

Hosting limits

GitHub Pages provides HTTPS hosting. This static site has no server-side authentication, billing verification, or paid entitlement enforcement. Paid access must use a backend and verified payment webhooks before a paid service launches. Browser code must not be used as a payment gate.

Report a concern

Use GitHub Security to check available reporting options. If private reporting is unavailable, open a public issue requesting a private contact channel without including exploit details, personal data, or credentials. See Support.