--- title: "Is OpenRouter Safe? What Actually Happens to Your Prompts" description: "OpenRouter routes requests to 400+ AI models, but data handling varies. Prompts aren't stored by default, though two opt-ins can grant commercial usage rights." url: "https://suprmind.ai/hub/insights/is-openrouter-safe/" published: "2026-10-08T04:38:41+00:00" modified: "2026-10-08T04:42:09+00:00" author: Radomir Basta type: post schema: Article language: en-US site_name: Suprmind categories: [AI Industry] tags: [AI, AI governance] --- # Is OpenRouter Safe? What Actually Happens to Your Prompts ![Illustration of a central secure hub connected to data nodes, servers, and AI icons via encrypted, lock-protected pathways, symbolizing secure data access control](https://suprmind.ai/hub/wp-content/uploads/2026/10/illustration-of-a-central-secure-hub-connected-to-data-nodes-servers-and.webp) > OpenRouter routes requests to 400+ AI models, but data handling varies by layer. Prompts aren't stored by default, though two opt-in settings—observability logging and a July 2026 terms update—can grant broad commercial usage rights. This breaks down what's logged, how Zero Data Retention works, and user-reported billing issues worth knowing before sending sensitive data through it. OpenRouter routes API calls to more than 400 models from dozens of providers through one endpoint, which makes it a popular default for anyone who doesn’t want to manage separate accounts with OpenAI, Anthropic, Google, and everyone else. That convenience comes with a tradeoff worth understanding before you send anything sensitive through it: every request now crosses OpenRouter’s own infrastructure*and*whichever downstream provider it routes to, and the rules governing each layer aren’t identical. Here’s what OpenRouter’s own documentation, its terms of service, and user reports actually say about what happens to your data. ## What OpenRouter stores by default By OpenRouter’s own documentation, prompt and response content is not stored unless you explicitly opt in. What it does store regardless of your settings is request metadata – token counts, latency, model used, timestamps – retained for billing and reporting. OpenRouter also samples a small number of prompts for anonymous categorization to power its model-ranking reports; if you haven’t opted into anything else, that sample isn’t tied to your account. So out of the box, the defaults are reasonably private. The risk shows up in what happens when you turn features on. ## The two opt-ins, and why they’re not the same thing OpenRouter has two separate settings that expose prompt content, and it’s easy to conflate them: -**Private Input & Output Logging**(Observability settings): stores your prompts and completions so you can review them later for debugging. OpenRouter says it doesn’t access this data itself, and for organizations only admins can view it. It’s stored in an isolated cloud storage bucket, encrypted at rest, and retained for a minimum of three months – possibly longer, at OpenRouter’s discretion, unless you request deletion. -**OpenRouter Use of Inputs/Outputs**(Privacy settings): a separate opt-in that lets OpenRouter use your prompt and completion data to improve its product, in exchange for a 1% discount on usage. This is the setting that actually grants OpenRouter rights over your content, not just storage. Both are off by default. The distinction matters because the second one is where the real data-rights question lives – and it got more explicit recently. ## A quiet terms update worth knowing about OpenRouter’s terms of service were updated in July 2026. According to third-party terms-tracking analysis, the revision clarified that opting into prompt logging now automatically enables chat logging as well, and that doing so grants OpenRouter a broad, perpetual license to use that content for commercial purposes – including the right to license or sell it in anonymized form. The setting itself is still opt-in and still reversible going forward, but the rights granted while it’s on are not retroactively undone by turning it back off. For anyone routing confidential code, client data, or regulated information through OpenRouter, this is the setting to leave alone. ## The two-hop problem Even with prompt logging fully off, your data still makes two administrative stops: OpenRouter, then whichever provider it routes your request to. OpenRouter’s own retention policy doesn’t change what the downstream provider does with the same prompt – some providers train on API data by default, some don’t, and OpenRouter documents each provider’s policy per model so you can filter for ones that don’t retain or train. OpenRouter also offers Zero Data Retention (ZDR) controls, enforceable globally, per model group, or per individual request, which restrict routing to only ZDR-compliant endpoints. One limitation: ZDR enforcement covers inference routing, not plugins or tools you enable, like web search – those may run through third-party services with their own retention rules. ## What users actually report Public reviews and forum threads add a second dimension beyond the written policy: account and billing stability. Recurring complaints on Trustpilot and Reddit describe accounts flagged and locked for “suspicious activity” after normal use, purchased credits that failed to appear or vanished from the dashboard, and support tickets on billing discrepancies going unanswered for weeks. OpenRouter’s terms give users only a 24-hour window to request a refund on unused credits, credits expire after 365 days, and cryptocurrency payments are non-refundable under any circumstances. None of this makes OpenRouter unsafe to use for casual or low-stakes work – plenty of Reddit threads describe it working fine for exactly that – but it’s a different risk profile than a direct provider relationship, and worth weighing if you’re routing anything business-critical through a prepaid balance. ## If privacy and control over your own balance matter more For people who’d rather not manage any of the above, deciding which opt-ins to avoid, tracking a terms update, or trusting a 24-hour refund window, [NanoGPT](https://nano-gpt.com/blog/openrouter-alternatives) is worth a look as an OpenRouter alternative built around privacy by default. It doesn’t log prompts by default, doesn’t add a markup on top of each model’s list price, and pays out a 3% bonus on crypto top-ups, which matters if you’re already paying with crypto specifically to avoid tying usage to a card or bank account. ## FAQ ### Does OpenRouter read or train on my prompts? Not by default. OpenRouter says it doesn’t train its own models on your data, and providers it routes to are excluded from training unless you’ve allowed it in your account settings for that provider specifically. ### Is it safe to enable prompt logging for debugging? The Observability logging option keeps prompts in your own account view and OpenRouter says it doesn’t access that data. The separate “Use of Inputs/Outputs” setting is the one to be cautious about – it grants broader commercial-use rights in exchange for a small discount, and as of the July 2026 terms update, that grant is described as perpetual. ### Can I stop a specific request from being logged at all? Yes – the zdr parameter can be set per request, independent of your account-wide settings, to force that request to only route to Zero Data Retention endpoints. ### Is OpenRouter safe to pay for? Card payments run through Stripe, a standard processor. The main risks are contractual, not technical: a short refund window, credits that expire after a year, and non-refundable crypto payments – all worth knowing before topping up a large balance. Tags: [AI](https://suprmind.ai/hub/insights/tag/ai/) [AI governance](https://suprmind.ai/hub/insights/tag/ai-governance/) --- ## Related Content - [The Ownership Illusion: Why “Who Owns ChatGPT?” Has Four Answers, Not One](https://suprmind.ai/hub/insights/who-owns-chatgpt.md) --- *Source: [https://suprmind.ai/hub/insights/is-openrouter-safe/](https://suprmind.ai/hub/insights/is-openrouter-safe/)* *Generated by FAII AI Tracker v3.4.1*