Ordinary use

Nothing you make leaves

Your deviceEdit, render, export and verify

Tools, fonts and models download to the device and carry nothing of yours

Kept: on your device, until you delete it

A service you call

Exactly what you send, for that call

  • MCP endpointleave it out
  • Hot-link renderLOLLY_DISABLE_RENDER_GET=1
  • MCP private filesoff unless LOLLY_MCP_PRIVATE_FILES=1
  • Agent invitation relayLOLLY_DISABLE_AGENT_CONNECTOR=1
  • Certificate serviceleave it out; exports sign anonymously
  • Image pass-throughLOLLY_DISABLE_IMAGE_PROXY=1
  • Penpot pass-throughleave it out

Kept: no content after the call, apart from relay invitations in memory and, when private files are on, temporary files for up to an hour

Your organisation

What your organisation configures

Your deviceLolly Work

  • Sign-in and policy
  • Shared projects and uploads
  • Work collabs and approvals
  • Server renders and delivery
  • Audit and usage telemetry

Kept: under your operator's retention and backup policy