The cleaning API holds no database and no session state. Each request is forwarded to the cleaning service, answered, and not stored; values can appear in service logs.
A file dropped in the browser is uploaded to our servers, stored there and processed to build the table you see. Without a key, the file and its table are kept for 30 days and then deleted automatically. With a key, the table stays until you ask for its deletion: write to egaere (at) ethz.ch.
When the browser app opens a session it sends a device identifier and browser details (user agent, language, referrer). The session cookie lives five days in your browser.
The API allows calls from any origin (CORS), so a page or a browser-side agent may call it directly.