Local Data Storage and Privacy

Mind Map Wizard prioritizes user privacy by adopting a strictly client-side data storage model. All user-generated content and sensitive information are stored directly within the user's local browser environment, ensuring that no data leaves your device to be saved on external servers.

Mind Map Content Storage

All mind maps you create, including their Markdown content and associated metadata (like topic and timestamp), are saved locally in your browser's localStorage. This approach guarantees that your mind maps remain entirely private to you. They are accessible only from the specific browser and device you used to create them. This local storage mechanism contributes to the application's speed, as there's no need to fetch data from remote servers when navigating your generation history.

OpenRouter API Key Storage and Encryption

Mind Map Wizard operates on a "Bring Your Own Key" (BYOK) model, meaning you provide your own OpenRouter API key for generating mind maps. For convenience, if you choose to save your API key within the application, it is also stored locally in your browser's localStorage.

To enhance the security of your API key, it is encrypted before being stored. The encryption process involves:

1. XOR Cipher: The API key is combined with a predefined, static encryption key (mmw_encryption_key_2024) using a simple XOR (exclusive OR) bitwise operation. This mixes the API key data with the encryption key.
2. Base64 Encoding: The result of the XOR operation is then encoded using Base64. This converts the encrypted data into a string format suitable for storage and retrieval, preventing issues with special characters.

When the application needs to use your API key, it retrieves the Base64-encoded string, decodes it, and then performs the reverse XOR operation to decrypt it back to its original form. This client-side encryption ensures that even if someone were to inspect your browser's local storage directly, the API key would not be immediately legible.

Implications for User Privacy

• No Server-Side Data Collection: Mind Map Wizard does not collect, transmit, or store any of your mind map content or API keys on its own servers. Your data resides solely on your device.
• Full User Control: You have complete control over your data. You can manage your mind map history, rename or delete individual mind maps, and remove your stored API key at any time through your browser's data settings or directly within the application's interface.
• Data Portability: Since mind maps are stored in Markdown, they can be easily exported and used with other Markdown-compatible tools or platforms.
• Browser-Specific Access: Your locally stored data is tied to the specific browser on the specific device you are using. Clearing your browser's local storage or cookies will delete all your saved mind maps and API keys from Mind Map Wizard.

This commitment to local data storage and client-side encryption underlines Mind Map Wizard's focus on providing a private and secure environment for generating mind maps using artificial intelligence.