Using AI without signing up

What the account is actually for

It is easy to assume the sign-up form exists to stop abuse. Some of it does. But the durable purpose of an account is simpler: it creates a stable identity to attach everything else to.

Once that identity exists, four things attach to it almost automatically. Your email address or phone number, verified. Every conversation, stored on a server under that identity. The name on your card, the moment you subscribe. And a retention policy, written by the company, changeable by the company.

This is the part worth being precise about, because it is where most privacy writing goes vague. The conversations are not especially dangerous on their own. Almost nobody is interested in one person's questions about a rash or a rent increase. What makes them sensitive is that they are joined to a person, permanently, in a system that outlives your interest in it. Remove the join and most of the risk goes with it.

What skipping it removes

• A profile that can leak. A breach of a service with no user table cannot expose a user table. This is not a promise about their security; it is a statement about what exists to be exposed.
• An export request that finds you. If a conversation was never stored under an identity, it cannot be produced later by an administrator, a legal request or a support agent, however legitimate the reason.
• Cross-linking. No email means the questions cannot be joined to the same address you use for your bank, your employer and every newsletter you ever signed up to.
• A policy change applied to your past. Retention terms change. What was kept for thirty days becomes kept for two years, and the notice arrives after the fact. Data that was never collected is not affected by any of that.
• The hesitation. The least measurable and possibly the most useful. People self-censor in front of a signed-in box. Removing the account removes the pause before the awkward question.

What it does not remove

This is where an honest page has to spend as much space as on the good part.

• The message still travels. Unless the model runs on your own machine, your text goes to a provider to be answered. A no-account service can send it without an identity attached, name the provider, and require that the provider does not keep it. It cannot answer you without sending anything.
• Your network still sees the destination. An employer, a school, an internet provider or monitoring software on a managed device can see that you connected to the site. That is true of every website and no account setting changes it. There is a layer-by-layer breakdown of that if it is your situation.
• The local copy is still a copy. Most no-account tools keep your history in the browser so you can come back to it. That is genuinely better than a server, and it is still readable by anyone holding your unlocked device.
• The payment, if you make one. A card has a name on it. Covered below.

The four things it costs you

Everything an account gives you comes from the same place: a copy of your identity and your data on somebody else's server. Remove it and you remove the conveniences it was paying for.

1. Recovery

There is no password reset without an email address to send it to. If your identifier is lost, and the device with the history is lost with it, nothing can be restored, because nothing exists elsewhere to restore from. This is the sharpest edge of the trade and it deserves saying first rather than in a footnote.

2. Sync

Your phone and your laptop are two separate stores with no server in the middle to reconcile them. Some tools offer a manual export and import, or a backup into storage you control, which is workable but is a thing you have to remember to do.

3. Support

Nobody can look up your account, because there is no account to look up. If something goes wrong with a subscription, the only handle is whatever identifier and receipt you kept yourself. Keep the receipt.

4. Backup

The copy on your device is the only copy. Clearing browser data, a factory reset, a dropped phone: any of them is final. If the history matters, export it deliberately.

Three different things get called "no account"

The phrase is used loosely, and the differences matter more than the label:

1. No account at all. The service generates a random local identifier and that is the whole login. Nothing is verified and nothing is sent to you. This is what NOLO, Duck.ai and Brave Leo do.
2. No account for the free tier. You can try it anonymously, and the moment you want the useful part you are asked for an email. Common, and not the same promise.
3. An account, but a private company holds it. The identity exists and the provider is trustworthy or well-encrypted. Better than the mainstream default, and it is still an identity. Proton Lumo sits here, deliberately, because it is tied to a Proton account.

All three are defensible. Only the first one means there is no profile in existence.

How to choose between them

Four questions, in the order that decides it:

1. Do you need to upload anything, and how long is it? This narrows the field fastest. Brave Leo does not accept files at all. Duck.ai reads photos and short PDFs, with longer documents behind a subscription. NOLO takes a few hundred pages and spreadsheets on its free plan. If your question arrives with a document attached, check that specific limit rather than the word "upload" on a feature list.
2. Does the tool name its providers? "We do not store your data" is a sentence. A list of which company receives what, with dates on it, is a claim you can check and hold someone to.
3. Does it say what it cannot do? A privacy page with no limits section is a marketing page. Every real system has edges, and the ones willing to print theirs are usually the ones that thought about them.
4. Do you need the smartest possible answer? If so, be honest with yourself. The strongest models are behind accounts, and no privacy argument makes a mid-sized model into a frontier one.

How NOLO does it

NOLO is the first kind. On the first visit the browser generates a random identifier such as nolo_a7b3_x9k2, and that string is the account. No email field, no phone number, no verification, on the web app and on the Android app alike. Conversations are written to your browser's local storage rather than to a NOLO database, and anonymous mode does not write them even there.

The messages themselves go to named providers under retention terms that are published rather than described: Groq for the Fast and Plus models with zero data retention enabled on NOLO's account, and OpenRouter for Pro and for image reading, with zdr and data_collection: deny set in the request so the platform refuses to route to any provider that would keep it. Measured on 26 August 2026 for the Pro model: of 18 candidate endpoints, 7 failed that filter and were never used.

And the four costs apply in full. Lose the identifier and the history is gone, because there is no email to recover it with. Sync is a manual backup into your own Google Drive or a file you save yourself. Support is one person answering an inbox. The only thing NOLO does about any of that is say it before you start rather than after.

What it adds over the other no-account options is narrower than a marketing page would claim, and worth stating exactly. Duck.ai reads photos and short PDFs too, and on model quality it is ahead. Where NOLO is different: a document of a few hundred pages, or a spreadsheet, read without paying anything; an app of its own rather than a capability inside somebody's browser; and an interface genuinely translated into 30 languages rather than following whatever your browser reports. If none of those three matter to you, Duck.ai is a good answer and this page is happy to say so.

Questions people ask next