The AI session you can’t take with you

2 months ago

You save a chat with an AI assistant and assume the file is yours. More and more, it is only a pointer into that company’s servers, and the meaning comes back scrambled.

Ask

Ask about this presentation

Answers are generated from this presentation.

Chapters

  1. 0:00The AI session you can’t take with you
  2. 0:10Your saved chat is only a pointer to the real session
  3. 0:16Encrypted here means sealed for the company, not for you
  4. 0:28Stored by default, and continued with a ticket
  5. 0:44The meaning comes back sealed, for only the company to open
  6. 1:05The sealing has real upsides, and it is a choice
  7. 1:24Portable means you could take the session elsewhere yourself
Show transcript

The AI session you can’t take with you

Your saved chat is becoming a pointer into the company’s servers, and the parts that carry the meaning come back sealed.
AI assistants data ownership session portability

You save a chat with an AI assistant and assume the file is yours. More and more, it is only a pointer into that company’s servers, and the meaning comes back scrambled.

Your saved chat is only a pointer to the real session

On your machine
your messages
the AI’s replies
→
the last reply’s ID (a ticket)
On the company’s servers
the working state that continues the chat
earendil.com

Your machine holds your messages and the AI’s replies. The rest lives on the company’s servers.

Encrypted here means sealed for the company, not for you

What it sounds like
your privacy control
What it is
a capsule only the company’s key opens, decrypted for its own models
“This encryption does not hide the data from the inference provider but it hides it from you”
earendil.com

One engineering team flips this around. Those parts are labeled encrypted. That label sounds like it protects you. But the company holds the key, and opens the data for its own models, not for you.

Stored by default, and continued with a ticket

System
Stored by default?
Kept for
Continue with an ID?
OpenAI’s system (ChatGPT)
Yes
about 30 days
Yesthe last reply’s ID
Google’s Gemini
Yes
55 days paid / 1 day free
Yesthe last reply’s ID
OpenAI and Google developer docs

The chat sits on the company’s servers by default. OpenAI’s system, behind ChatGPT, keeps it about thirty days. Google’s Gemini assistant stores it too. You continue by handing back the last reply’s ID, a ticket that only works on their computers.

The meaning comes back sealed, for only the company to open

{"type": "reasoning", "encrypted_content": "gAAAAAB..."}
the AI’s private working-out
{"type": "thinking", "thinking": "", "signature": "EqQBCg..."}
long-chat state
{"type": "thought", "summary": [], "signature": "EpoGCp..."}
a summary item
Scrambled text where the meaning should be.
earendil.com

Even if you save every reply, the parts that carry the meaning come back sealed. Three of them: the AI’s private working-out, the summary it writes to shrink a long chat, and even the messages its helper AIs send each other. Each returns as scrambled text only the company’s key can open. No other AI can read it, so your file cannot move.

The sealing has real upsides, and it is a choice

Real reasons
Stores nothing at all → better privacy
Long chats run faster
Proof it’s a choice
Anthropic’s Claude returns the long-chat summary as readable text you can steer
earendil.com; Anthropic docs

These companies have real reasons. The same sealing can power a mode that stores nothing, good for privacy. But the sealing is a choice. One assistant, Anthropic’s Claude, returns that summary as readable text you can steer. The objection is narrow: a better experience, tied to less of your control.

Portable means you could take the session elsewhere yourself

Inspection
see what the model saw, and what agents told each other
Export
the session stands on its own
Replay
another tool can rebuild the context
Audit
explain why it acted, after the fact
Deletion
find and remove every server-side copy
A session is portable only if none of these needs the old company.
session.export() → revokeCredentials(oldProvider) → newProvider.continueFrom(transcript)
earendil.com

The team grants that most people never switch AIs mid-chat. The value is the option: a session you could export and continue on a different AI, with nothing to unlock.