Skip to content

Security: llm-ring/lmring

Security

SECURITY.md

Privacy Policy

This privacy policy applies to the lmring web application (hereby referred to as "Application") that was created by lmring (hereby referred to as "Service Provider") as an Open Source service. This service is intended for use "AS IS".

Information Collection and Use

The Application collects information when you register and use it. This information may include:

  • Your email address and name (for account creation)
  • Your device's Internet Protocol address (IP address)
  • Browser user agent information
  • The pages of the Application that you visit, the time and date of your visit
  • User preferences (theme, language settings)
  • Conversation data (messages you send and AI responses)
  • API keys you provide (stored in encrypted form)
  • Voting and feedback data on AI model responses

The Application does not collect precise location information such as GPS data. Your approximate geographic region may be inferred from your IP address for security purposes (such as bot protection) if such features are enabled.

The Service Provider may use the information you provided to contact you from time to time to provide you with important information, required notices and marketing promotions.

For a better experience, while using the Application, the Service Provider may require you to provide us with certain personally identifiable information. The information that the Service Provider request will be retained by them and used as described in this privacy policy.

Third Party Access

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

The Service Provider may disclose User Provided and Automatically Collected Information:

  • as required by law, such as to comply with a subpoena, or similar legal process;
  • when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
  • with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can stop all collection of information by the Application easily by deleting your account or ceasing to use the service. You may also contact the Service Provider to request account deletion.

Data Retention Policy

The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like them to delete User Provided Data that you have provided via the Application, please contact them at imshuazi@126.com;Cloxl@cloxl.com and they will respond in a reasonable time.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider (imshuazi@126.com;Cloxl@cloxl.com) so that they will be able to take the necessary actions. You must also be at least 16 years of age to consent to the processing of your personally identifiable information in your country (in some countries we may allow your parent or guardian to do so on your behalf).

Security

The Service Provider is committed to safeguarding the confidentiality of your information. The Service Provider implements the following security measures:

  • Encryption: Sensitive data such as API keys are encrypted using AES-256-GCM encryption before storage
  • Secure Transmission: All data is transmitted over HTTPS (TLS encryption)
  • Session Management: User sessions are securely managed with automatic expiration
  • Input Validation: All user inputs are validated to prevent injection attacks
  • Access Control: Role-based access control restricts data access to authorized users only
  • Bot Protection: Optional bot detection and rate limiting to prevent automated attacks

The Service Provider regularly reviews and updates security practices to protect your information.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2025-12-29

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at imshuazi@126.com;Cloxl@cloxl.com.

There aren’t any published security advisories