Storage and privacy

Browser projects

The Studio stores projects, active tabs, drafts, appearance, and canvas zoom in browser localStorage. Data is scoped to the current origin and browser profile.

Closing a project tab does not delete the project. Deleting a custom project removes it from the Studio’s stored project list.

Local files

Uploaded images, logos, fonts, and shader source are loaded by the browser. Most are represented by temporary object URLs for the current page session. A downloaded artifact may embed the selected image when portability requires it.

Agent requests

POST /api/generate processes request data in memory and does not persist the submitted identity or asset. The route responds with Cache-Control: no-store.

GET discovery endpoints are public and cacheable for a short period. The generation route supports CORS with Access-Control-Allow-Origin: *.

Asset boundaries

• Submit only assets you are authorized to process.
• Remote URLs are not fetched.
• Custom assets must be supplied as supported base64 data URLs.
• A request body may not exceed 5 MB.
• Bundled GT and reference-brand assets remain the property of their respective owners.

License

Glyphfield source is open-source software released under the MIT License. You may use, copy, modify, merge, publish, distribute, sublicense, and sell the software subject to the notice and warranty terms in LICENSE.

The software license does not transfer rights in bundled third-party marks, reference-brand assets, or assets submitted by users.