# What Screwtape stores

Judged content stays in memory for the request unless an API key sets retain to true and retention_days is not 0. A signed receipt for an API key is stored without the prompt or the output. POST /v1/receipts/verify does not store the receipt.

The default retention is 1 day. A key can choose 0, 1, 30, or 90 days. Cloudflare D1 encrypts stored data at rest. This software does not add a second encryption layer. The receipt signing key is a worker secret and is not stored in the database.

Subprocessors are Cloudflare (the worker, D1, and hosting), Groq only when an LLM API key is set, PayPal when a pack is paid with PayPal, and the x402 facilitators https://facilitator.xpay.sh (Base) and https://x402.dexter.cash (Base and Solana). Solana settlement goes through https://x402.dexter.cash.

Contact: mailto:screwtapedev@gmail.com