Run models across providers without creating another account.

klopaper’s privacy-focused architecture does not inspect or store generated media, so it cannot reliably moderate every result. One 18+ boundary is simpler and safer than scanning private output to separate SFW and NSFW workflows. The gate therefore applies even if you only create SFW work.

No. klopaper uses a random browser session instead of an account. There is no email address, password, or profile to create.

fal.ai and Replicate run inference. Civitai supplies community models, LoRAs, and discovery data. You can connect multiple providers and choose the right endpoint for each job.

Keys are stored in this browser’s local storage, masked in the interface, and excluded from recipes, history, logs, and klopaper’s database. Browser local storage is readable by JavaScript on this origin, so a same-origin XSS bug or a privileged browser extension could expose it. Use scoped provider keys, revoke them at the provider if needed, and delete them in Settings or by clearing this site’s data.

fal.ai supports CORS for its API, queue, storage, billing, and model endpoints, so klopaper sends fal uploads, generations, polling, cancellation, model discovery, balance, and usage requests directly from your browser to fal.ai; the fal key never passes through klopaper’s server. Replicate does not support browser CORS, so klopaper attaches your browser-held token to a same-origin proxy request and forwards it to Replicate only in memory for that request. Civitai public REST GET endpoints support CORS, but authenticated REST and tRPC preflights are not consistently allowed; klopaper therefore uses keyless public access where practical and a transient same-origin proxy for account data, gated downloads, and other authenticated requests. Public Civitai browse routes may also pass through klopaper for response normalization and caching. Workflows that need FFmpeg, media cropping, or private model mapping still send only that input data through klopaper preprocessing endpoints—never the fal.ai key.

klopaper uses its shortest retention profile. fal.ai request payload storage is disabled and input and output files expire after one hour. Replicate removes API prediction inputs, outputs, files, and logs after one hour by default.