Your account & project data

Updated October 10, 2026.

What is stored

Duke stores your account identity and a salted password hash for email signup, project plans, code, assets, build records, learning notes and membership status. Secure cookies maintain your login. Device storage retains interrupted-edit recovery copies; saved projects live in the hosted database and file storage.

Provider connections

If you choose persistent connections, API keys are encrypted with account-and-provider binding before storage. They are decrypted server-side only when needed for your requested provider operation. Disconnecting removes the saved connection. Keys are excluded from project exports and recovery copies. Session keys remain in memory until the page closes or you remove them.

External processing

Prompts and relevant project context are sent to the AI provider you select. OpenAI, Meshy and ElevenLabs handle those requests under their own terms and privacy policies. Google handles optional one-click sign-in when enabled. Lesson notifications and lab progress are stored with your account; tutor requests send relevant game context to your chosen provider. Stripe handles payment details; Duke stores billing identifiers and status rather than card numbers. Cloudflare and Sites supply hosting and storage.

Control

You can export source, delete individual projects, disconnect saved provider keys and log out from the studio. Disconnecting a key does not refund provider credits. Contact the merchant using the contact information on your membership receipt for account-data requests. Deletion of a project does not remove payment records required by the payment provider.