What stays, what leaves
CozyGPU runs on your machine, inference in your own RunPod account. This page lists every outbound connection the app makes and what it carries. If it is not here, the app does not do it.
Stays on your machine
- Library
- Images, videos, thumbnails, posters, previews and their metadata, in a SQLite database and a media folder in the app's data directory.
- Keys
- RunPod API key, RunPod S3 key, xAI key: in memory while the app runs, on disk as keys.enc encrypted with the OS keychain (Electron safeStorage).
- Prompts and settings
- Prompt history, per-model settings, update channel, library folder. Plain rows in the local database.
- LoRAs and uploads
- Your .safetensors files and any input images or videos you add, stored by content hash.
- Logs
- logs/service.log, rotated at 5 MB. Keys are never written to it.
The app's local service listens on 127.0.0.1 on a random port with a per-launch token; it is not reachable from other machines. Nothing is synced to a CozyGPU server. There is no account on our side besides the license.
Leaves your machine
| To | When | Sends | Receives |
|---|---|---|---|
| RunPod (api.runpod.io, api.runpod.ai, s3api-<datacenter>.runpod.io) | Validating the key, creating or repairing endpoints and volumes, every generation, every poll. | Your RunPod API key as a bearer token; the prompt and settings of each job; input images and videos (inline up to 7 MB, otherwise to a network volume in your account); LoRA files to your volumes. | Job status, generated media (inline or from your volume), GPU availability, endpoint and volume details. |
| xAI (api.x.ai) | Only when you click Enhance and have added an xAI key. | The prompt text you typed and your xAI key. | The rewritten prompt. |
| CozyGPU license server | When you activate or deactivate, on launch and once a day while the app runs. | Your license key, a device identifier (a hash of a random salt stored on the machine plus the computer name, platform and user name; never a serial number), the computer name and the app version. The thank-you page on this site sends the Stripe checkout session id once, to show your key. | A signed token saying whether the license is active and until when. No prompts, media, keys or usage statistics are included. |
| CozyGPU update feed (releases.cozygpu.com) | On launch and about every few hours. | A plain request for the channel's manifest (latest.yml or beta.yml). Ordinary request metadata (IP address, user agent) reaches the file host. | The manifest, the installer when an update is available, and the signed model catalog. |
| Docker Hub (by RunPod, not by the app) | When a RunPod worker starts for the first time. | Nothing from your machine; RunPod pulls the public worker image. | Nothing on your machine. |
Endpoints named cozygpu-<model> and up to three 10 GB network volumes are created in your account and are yours to inspect or delete. Outputs over 8 MB pass through a volume and are deleted from it after download. Network volumes keep copies of your LoRAs and large inputs until you remove them.
Mac builds are signed and notarized; Windows builds are signed; updates are verified against the signer before install. The model catalog is signed with a key compiled into the app, and an unsigned or altered catalog is ignored. Checksums for installers are on the download page.
Found something that does not match this page? Email support@cozygpu.com. We would rather hear it from you.