Privacy & terms
Last updated: 11 October 2026. RWA Notes is an experimental AGI Scorecard tool.
Your inputs
Form values, imported JSON and optional artifact files are processed in your browser. Application code does not upload them, store them in cookies/localStorage or send them to an AI provider. Reloading clears tab memory. Downloaded files remain on your device and may contain record labels, addresses or source URLs; review them before sharing.
Reports and public sharing
CSV paste and comparison snapshots remain in tab memory. Readable reports and printed pages may include your record labels, addresses or URLs. Public example links include only an allowlisted fictional scenario name. The site does not encode your inputs into share links. Optional embedded cards request a static image from this host.
Remote MCP calls
The browser worksheet continues to calculate in your tab. The optional remote MCP endpoint is different: your AI client sends the arguments you choose to this server. The Worker computes a response in request memory; application code does not save those arguments or results to D1, an account, or a public report. They are not sent to a model or to the source URLs in your records. Your AI client and hosting provider have their own processing and logging policies. Do not send secrets, private keys or records you are not permitted to share. Use the browser worksheet or offline runner when the input must remain on your device.
MCP requests are rate-limited using an IP-derived transient limit key. The limit is separate from optional feedback. MCP calls do not submit feedback or count as verified users or revenue. Citation URLs identify public methods; they never contain your calculation inputs.
Optional feedback
When you press Send anonymous feedback, we receive the selected frequency, usefulness and interest, whether an own-record check completed, a random submission ID, the site ID and a QA flag. A new random ID is generated per submission and stored only to deduplicate that request. We do not collect an email or wallet address. Counts are submissions, not independently verified people, customers or revenue.
Feedback is stored in an isolated table on our existing Cloudflare infrastructure. Records older than 35 days are removed on the next accepted feedback submission; they may remain longer when no such request occurs. Public /api/stats returns grouped choices only. QA feedback is identified separately.
Optional saved research
The market research board saves a watchlist price baseline or a research note only when you choose Save. These remain in this browser, are never sent to our server, and are usable for up to 30 days; expired records are removed on the next page load. Each has a Delete button. Browser storage is not encrypted. Export downloads a note to your device; it does not publish or send it. Review dates do not schedule notifications. Usage-measurement consent remains separate and is never remembered.
Optional usage measurement
Measurement is off by default on each page. Choosing the checkbox sends fixed event, page, campaign and coarse source categories plus a random per-event ID for deduplication. No input values, referrer URL, query text, IP address, email, wallet or persistent visitor identifier are stored by this measurement code. No cookies or browser storage remember your choice. DNT/GPC and QA/probe visits are excluded. Consent applies only to this page visit and can be switched off.
Events older than 35 days are deleted on the next accepted measurement submission; they may remain longer without new submissions. Statistics reads do not alter stored records. Public /api/growth shows grouped counts over a rolling 28 days, with testing excluded by default. Counts are opt-in events, not people, linked cross-domain sessions, proven referrals or sales. Source categories can be missing or spoofed. Hosting provider metadata policies remain separate.
Market and content sources
Reference prices refresh on request after five minutes, official metadata after one hour. They may be cached at different edge locations. Receipt time is not trade time; stale snapshots are labelled and snapshots older than a day are hidden. Source failures do not fabricate replacement data. Quotes and official announcements are not transaction verification or investment signals.
Hosting and links
Cloudflare necessarily handles normal request metadata to serve pages and rate-limit feedback. We do not promise that infrastructure providers keep no logs. Official-source links take you to third-party sites with their own policies. Google Analytics starts by default on public pages unless you have opted out. An isolated analytics page sends public page details and fixed action names, plus recognised campaign tags. It does not receive your files, form values or other URL parameters. Google uses host-specific analytics cookies. You can disable or re-enable it using the analytics toggle in the footer; first-party counts and feedback remain separate.
Use and limits
Free beta for review and evaluation. No live asset feed, reserve audit, redemption verification, credit rating or investment recommendation. Outputs depend on supplied evidence and assumptions. There is no checkout, subscription, custody or automated financial action. External vendor descriptions are dated research, not affiliations or guarantees. The offline bundle is licensed for internal evaluation; see its included LICENSE.txt.
Updated