Security & Data Governance

Privacy Policy

CompareLLM is built with privacy-by-design. We do not sell user data, track personal browsing habits, or run invasive third-party ad networks.

Account Credentials & Encryption

Passwords are cryptographically salted and hashed using bcrypt (10 rounds). Plaintext passwords never touch logs or databases.

HTTP-Only Signed Session Cookies

Authenticated sessions are stored in encrypted, signed httpOnly cookies (14-day validity). JavaScript in browser extensions cannot access session tokens.

Community Votes & Watchlists

Matchup votes, model watchlist bookmarks, and discussions are stored securely in MongoDB and associated solely with your user profile.

Data Retention & Account Deletion

You retain the right to delete your account, votes, and comments at any time upon request to the deployed platform administrator.