The Postern Store is a static page. There is no store server, no account, no telemetry,
and no analytics — it does not track what you search, view, or “install”.
The entire catalog ships inside this file; searching and comparing run locally. The honest ledger:
●
The catalog, the search, the filters — this page only
All app data is embedded in this HTML file. Filtering, ranking, comparing, and plain
keyword search are deterministic local code — a search sends nothing about your
query anywhere unless you ask the concierge to interpret it.
◮
Your need text → Anthropic (only when you use the concierge)
When you ask in natural language and have set an API key, the text of your need — spoken
or typed — goes from your browser directly to api.anthropic.com under
your key, so the model can derive the structured filters. No middleman relays or
logs it; Anthropic processes it under your agreement with them. Prefer never sending it?
Use the manual filter panel or keyword search — same results engine, zero network.
◮
Your voice → your browser’s vendor (only while you hold to talk)
Voice input uses the browser’s Web Speech API, which in Chrome and most browsers
sends your audio to the browser vendor’s servers for transcription. It is
strictly push-to-talk: the microphone is captured only while you hold the mic button or the
space bar, never in the background. Want zero audio leaving the machine? Type instead.
●
Spoken summaries — on-device
Text-to-speech uses your operating system’s voices via speechSynthesis.
Audio is generated locally and does not leave the device.
●
Key & settings — this browser only
API key + preferences: localStorage. With the optional lock set in Settings, the key is
stored only as AES-256-GCM ciphertext sealed under your passphrase; without it, it is readable
in localStorage — Settings says so plainly. Your searches, comparisons, and the conversation
with the concierge: tab memory only, never persisted. “Erase everything” in Settings wipes
all of it instantly.
What we won’t claim: the Store is not “100% private.” If you use the concierge,
the need you describe necessarily reaches Anthropic; if you speak, your audio may reach your
browser vendor. What the Store guarantees is no extra parties : no store servers, no
resellers, no analytics — the only network destination in this page’s code is
api.anthropic.com, and only when you choose it. The source is one readable HTML
file; verify it yourself.
Understood