# Storage and privacy

See where Glyphfield keeps projects, saves and local files in your browser, what the HTTP API does with request data, and which license terms apply.

## Browser projects [#browser-projects]

The Studio keeps projects, open tabs, the active tool and folder, most tool drafts, Visual settings and canvas view state in browser `localStorage`. Design Lab, Animation, Lottie and the expression tools (OpenGraph, Terminal card, Partnership lockup, Blog cover and Slide templates) keep named saves and complete autosaves in IndexedDB. Converted assets and captured shader frames are also stored in IndexedDB. A small recovery journal in `localStorage` holds the newest portable source while the page unloads, and it is cleared once IndexedDB has the same version. All of this data belongs to the current origin and browser profile.

Closing a project tab does not delete the project. **Delete active project** asks for confirmation, and **Delete project** then removes that project from the project list in this browser. The deletion cannot be undone. Built-in identities cannot be deleted.

## Local files [#local-files]

The browser loads the images, logos, fonts, Lottie files and shader inputs that you upload. Some are held in temporary object URLs for the current page session. Converted assets and portable canvas records can store embedded copies locally. A downloaded artifact contains or embeds the selected visual input where its format allows.

Clearing site data can remove projects, drafts, saved designs and converted assets. Export the identity and source documents and keep the original authorized files before clearing the origin when the work must survive.

Named saves and autosaves let you recover work inside the current browser, but they are not off-device backups. [Backup and restore](/docs/artifacts/backup-and-restore) describes a lasting backup of source and files.

Pausing Design Lab and exporting PNG, JPG, GIF or MP4 do not create captured-frame assets. **Capture shader frame** stores a lossless PNG checkpoint with the editable shader recipe, and named saves and portable source keep these checkpoints. Playback and extending the time explorer do not encode or save new shader frames.

## HTTP requests [#http-requests]

`POST /api/generate` processes request data in memory and does not store the submitted identity or assets. Its responses send `Cache-Control: no-store`. `POST /api/brand/validate` and `POST /api/brand/kit` are also stateless and send `no-store`.

The GET discovery routes are public. `/api/agent`, `/api/labs`, `/api/materials`, `GET /api/generate` and `/openapi.json` allow caching for 300 seconds. The agent routes send `Access-Control-Allow-Origin: *`, so pages on other origins can call them.

## Analytics [#analytics]

The public site measures visits with Google Analytics 4: the pages viewed, the device and an approximate location, to see which parts of Glyphfield people use. Analytics does not read projects, saves or uploaded files, and nothing it collects is used for ads or ad personalization. Visitors in the EEA, the UK and Switzerland are measured without analytics cookies (Google Consent Mode). The [Google Analytics opt-out browser add-on](https://tools.google.com/dlpage/gaoptout) turns the measurement off.

## Asset limits [#asset-limits]

* Submit only assets you are authorized to process.
* The API does not fetch remote URLs.
* Custom images must be base64 data URLs of GIF, JPEG, PNG, SVG or WebP files, up to 5,000,000 characters each.
* A request body cannot exceed 5,250,000 bytes.
* Bundled General Translation and reference-brand assets remain the property of their owners.

## License [#license]

Glyphfield's source is open-source software released under the MIT License. You may use, copy, modify, merge, publish, distribute, sublicense and sell the software under the notice and warranty terms in `LICENSE`.

The software license does not grant rights to bundled third-party marks, reference-brand assets or assets that users submit. [Licensing](/docs/reference/licensing) lists the material that keeps its own terms.