Square65This notice explains what information Square65 handles when you use square65.com, its account and computer features, its SDK, and Square65 Local AI.
Information we handle
- Account and sign-in: your email address, password verifier (not your plain-text password), account identifiers, and, if you choose Google sign-in, the provider identifier and profile details Google shares, such as your name or profile photo.
- Computers and network: the labels you choose, enrollment credentials, whether a computer is connected, available task slots, and bounded workload-performance measurements. Saved performance profiles expire after 30 days. Live availability changes as browser sessions connect, pause, or disconnect.
- Website permissions: the exact website origin and compute or read permissions you approve, so you can review or revoke access.
- Service operation: requests, security signals, and limited execution details needed to authenticate accounts, coordinate jobs, troubleshoot failures, and protect the service.
- Supercomputer experiment: an anonymous browser identifier, the display name you choose, assigned and submitted model-scoring work, load, computation, and elapsed-time measurements, and any messages you post in the public live chat. Chat messages appear with your display name to other visitors. These records help show experiment activity and improve scheduling.
Work you choose to share
Square65 processes supported jobs that you request. An app determines the job inputs it sends. If a job is assigned to another computer in your Square, that computer and its owner may be able to inspect the inputs and outputs assigned there. Only connect computers you trust, and do not send information you need to keep confidential.
Square65 Local AI runs its embedding model in your browser. The model files are downloaded from Hugging Face, which may receive ordinary download and connection metadata. Your note text stays in your browser by default. If you explicitly choose Use Square65, the app sends note and query embeddings—not the original note text—to your trusted computers for similarity scoring. Embeddings can still reveal information about their source.
The Supercomputer experiment runs protein-sequence model calculations in participating browsers. Submitted scores and performance timings are stored on Square65's server for verification, research, and future scheduler development. This is a computational screen, not a laboratory measurement of enzyme activity.
Cookies and account security
Square65 uses essential, HttpOnly browser cookies for sign-in sessions and short-lived Google authorization. Account sessions expire after seven days. The Google sign-in flow is handled through Amazon Cognito and Google; Square65 verifies the returned sign-in before using it for your account.
If you join the Supercomputer experiment, an essential cookie remembers your anonymous participant identifier so the site can credit your work and resume your place in the experiment.
New accounts receive a one-time recovery key. Square65 stores a digest of that key, not the key itself. Save it when shown; it cannot be sent to you later by email.
Service providers and disclosure
Square65 uses Amazon Web Services to host the runtime and account database, Cloudflare for the public network edge, and Google (through Amazon Cognito) when you choose Google sign-in. Some Square65 pages also load typefaces from Google Fonts; Google may receive ordinary browser and connection metadata when those font files are requested. A computer you have explicitly connected or authorized may receive the portion of a supported job assigned to it. We do not sell personal information.
Retention and your choices
Account, enrollment, and permission records are kept to operate your Square65 account. You can revoke a website permission or delete your account from account settings. Account deletion removes its live records and invalidates its active device links. Live jobs and availability are runtime data and can end when the session ends; saved performance profiles expire after 30 days. Encrypted backups can retain deleted records until their snapshots expire: scheduled daily snapshots keep up to seven recovery points, and separately retained recovery snapshots remain until retired. To ask a question or request access to or correction of account information, email [email protected]. We may need to retain limited information for security or legal obligations.
Changes and contact
We may update this notice as the service changes. The date above identifies the latest revision. Questions about this notice can be sent to [email protected].