What happens to your question
When your AI app uses the library, your question passes through a few hands. Here is each one, what it sees, and what it keeps.
In short
- The connector keeps no copy of your conversations or documents, and it doesn't log what you search for.
- It never sees your whole conversation or your files.
- Two outside services are involved: WorkOS for sign-in and Voyage AI for search. Cloudflare carries the traffic.
- Your AI app holds the conversation itself, under its own privacy terms.
- No ads, analytics, cookies or tracking, on the connector or this website. Nothing is sold or shared for marketing.
Who sees what
| Who | Sees | Keeps |
|---|---|---|
| Your AI app (Claude, ChatGPT or Gemini) | The whole conversation. | Whatever its own privacy terms say. It is the largest holder of your data, and the library has no say over it. |
| Cloudflare | The requests your AI app sends to the connector, in transit. | Its own traffic records, under Cloudflare's terms. |
| WorkOS (sign-in) | Your email address or GitHub login, and when you signed in. | Your sign-in account. I can see the list of people who have signed in, and use it to count sign-ups and, if needed, block abuse. |
| The connector (a computer I run) | The search your AI app sends: usually a short query it writes from your question, not the conversation. | No search text. See below. |
| Voyage AI (search) | The search words, and the library passages being ranked against them. | Nothing. The library's Voyage account is opted out of data use, so Voyage deletes the text once it has processed it and doesn't train on it. |
What the connector records
- A log line for each request: which tool was used, whether it worked, how long it took, and a made-up ID for the person (part of a hash of the sign-in ID, not your email address). Not the words you searched for.
- Counts for the daily limit: how many requests each ID made today and this minute. Cleared after a week.
- Monthly totals: how much searching cost, not tied to any person.
A troubleshooting switch could add search text to the log. It is off.
What it never receives
- Your conversation. The AI app sends only the search it wants run.
- Your files. The connector can't read anything on your device or in your AI app.
- Your IP address or location. Requests normally come from your AI app's servers, not from you, and the server keeps no access log. If you connect a tool that runs on your own computer (Claude Code, for example), Cloudflare sees that computer's IP address as any website would.
Email and public forms
Email to hello@christianopenlibrary.org is read only by me. The library's forms on GitHub are public, so leave out anything private if you use them.
Check it yourself
- The connector's code is public: github.com/Christian-open-library/Connector. The logging is in
plugin/col-library-connector/src/Log.php. - The outside services' own terms: WorkOS, Voyage AI privacy and terms, Cloudflare.
If anything here turns out to be wrong, it goes in the corrections log.