Published August 8, 2026 · Updated August 19, 2026
Choosing an AI tool that keeps your conversation history on your own device solves a real problem: there's no vendor-held archive of your thinking to breach, mine, or hand over. It also quietly hands you a job you never applied for. You are now the backup administrator. Nobody sends a memo about this. It becomes apparent the first time a browser update, a "clear site data" click, or a new laptop takes six months of work with it, and there's no support ticket that can bring any of it back.
This is the practical guide to doing that job properly — what to export, how to store it without undoing the privacy you were buying in the first place, how to prove the backup actually works, and how to move your history to a new machine without losing or duplicating anything. It assumes nothing about the tool you use, though the concrete steps at the end are for Secret Chat AI's export and import.
Your export is not the same thing as a cloud export
Both are called "export", which hides the fact that they mean opposite things.
When you export from a mainstream chatbot, you're requesting a copy. The original stays exactly where it was, in the provider's account database, and the copy is a convenience — something to read, migrate, or keep for your records. Losing it usually costs you little, because you can ask for another one, with one caveat worth holding on to: the next export is a fresh snapshot, not the one you lost. It can't give you back chats you deleted in the meantime, and it isn't available at all once the account is closed. The mechanics reflect those low stakes: ChatGPT's export is delivered by email and the download link expires 24 hours after you receive it, with the export itself taking up to seven days to arrive. Claude's works the same way; you request it from Settings → Privacy, and "the download link will expire 24 hours after delivery". A short-lived link is perfectly reasonable for a duplicate.
When your history lives in your browser, the export isn't a copy of the archive. It is the archive's only other instance. There's no server-side original to re-request, because the whole point of the architecture is that no such original exists. That single difference is why everything below matters: the file you download isn't a convenience, it's the entire safety net.
A cloud export is a spare key. A local-first export is the only key.
What actually destroys local history
People imagine drive failures. In practice, local chat history is almost always lost to something mundane and self-inflicted, in roughly this order of frequency:
- Clearing site data. The single biggest cause. "Clear cookies and site data" sounds like housekeeping and behaves like a wipe — browser-stored conversations go with it, without a confirmation dialog that mentions them.
- Privacy cleaners and aggressive settings. Tools that scrub browsing traces on a schedule, and browser options like "delete cookies and site data when you close all windows", do exactly what you configured them to do. The irony is sharp: privacy hygiene destroying the history of a privacy-first tool.
- A new device, or a reinstalled browser. Nothing syncs, because there's nothing on the provider's side to sync from. A fresh browser profile is a fresh empty database.
- Uninstalling an installed web app. Removing a PWA can take its storage with it, and on mobile that decision is often made by the operating system reclaiming space.
- Working in a private window. Private sessions typically discard their storage when they close. That's the feature, not a bug, but people reach for them expecting anonymity and are surprised to lose the transcript. We went through what that mode does and doesn't cover in why incognito mode won't protect your AI chats.
- Storage eviction. Browsers can reclaim best-effort storage when a device runs low on space. This is the rarest of the six and the only one that requires no action from you. The underlying mechanics are in how IndexedDB and OPFS actually store your chats.
Notice that five of the six are things a person does deliberately, to their own machine, for good reasons. You can't engineer around them. You can only keep a copy somewhere else.
What a real backup has to contain
An export that saves only the text of your messages is a transcript, not a backup. Restoring from it would leave you retyping structure that took months to build. A complete export needs four layers:
- The conversations — every message, in order, with which model answered.
- The structure around them — projects and their organisation, and any branches you spun a conversation off into.
- The configuration — standing instructions attached to a project. These are usually the most laboriously tuned and least memorable part of a workspace.
- The attachments — the images and documents the conversations refer to. A restored chat that says "based on the contract you sent" and has no contract is half a record.
Something else to check is whether an export carries the whole of an unusual turn or only its headline. A multi-model turn is the case that exposes this: on Secret Chat AI's AI Council, one question is answered by several models from different companies at once and a referee compares them claim by claim, so a single turn holds several full answers plus a disagreement table. All of it's stored in the conversation record and all of it's exported, which matters, because the comparison is usually the part you would most want to still have in a year, and it's the part a naive export format would flatten to the summary.
One structural detail worth checking in any tool: whether the attachments travel inside the export file or alongside it. Secret Chat AI's current export format embeds everything in the JSON inside a single ZIP, so there's exactly one file to keep track of and nothing that can be separated from its conversation by a careless copy. Large histories are split across several JSON files within that one archive, but the archive stays the unit you handle.
The uncomfortable part: your backup is the most dangerous file you own
Here's the trap that catches careful people. You chose a tool that keeps conversations off a vendor's servers. You export dutifully. Then you put the export in a consumer cloud folder, or email it to yourself, or leave it in Downloads on a laptop you take to conferences.
In one step you have created the thing you were avoiding: a single file containing the full plaintext of every conversation you have ever had and every document you ever attached, sitting somewhere you don't control, readable by anyone who obtains it; no password, no account, no login. Secret Chat AI's export is deliberately not encrypted, so that any tool can open it and you can never be locked out of your own data. That's the right default for portability and the wrong state for storage.
So encrypt it yourself. This takes about thirty seconds and is the difference between a backup and a liability:
- Windows, and via ports elsewhere: repackage the export into an encrypted archive with 7-Zip, choosing AES-256. Don't accept the legacy ZipCrypto option if your tool offers it; that scheme has long been known to be weak, and it exists only for compatibility with ancient software. In the 7z format you can also encrypt the file names, so the archive doesn't advertise its own contents.
- macOS: Disk Utility will create an encrypted disk image, and you can drop exports into it as you would a folder.
- Cross-platform, for a standing archive: a VeraCrypt container works the same way for anything you keep long-term.
Two clarifications that trip people up. FileVault and BitLocker do not cover this. Full-disk encryption protects the drive when the machine is off or locked; once you're logged in it decrypts transparently, so anything running as you can read the file, and the copy you upload or hand to a colleague leaves the encrypted volume behind entirely. And a strong passphrase you cannot remember is a second way to lose the data — put it in your password manager the moment you create the archive, not later.
Once the archive is encrypted, the cloud-folder question answers itself. An encrypted container in consumer cloud storage is a reasonable off-site copy. The plain ZIP isn't.
Where to keep it
The old three-copy rule adapts cleanly, and you don't need a home server to follow it:
- Copy one — the live history in your browser. This isn't a backup; it's the working original.
- Copy two — an encrypted archive on the machine itself or on an external drive. Fast to restore from, and it covers the "I cleared site data by accident" case, which is the case you will actually hit.
- Copy three — the same encrypted archive somewhere physically elsewhere: another drive kept at a different address, or cloud storage. This covers theft, fire, and a dead laptop.
The point of the third copy isn't paranoia about disasters. It's that copies one and two live in the same room and often on the same disk, so a single event takes both.
A backup you have never restored is a hypothesis
This is the step everyone skips, and it's the one that separates people who have backups from people who believe they do. An export is a claim about the future: if I need this, it will work. You can test the claim in five minutes, and you should test it once, immediately after your first export.
- Open a separate browser profile (not a private window, a genuinely different profile), so your live history is nowhere near the experiment.
- Load the app there and import the export file.
- Open the two or three conversations you would most hate to lose. Check that the messages are complete, the attachments open, and any project instructions came across.
- Delete the test profile.
If something is missing, you have learned it on a quiet Tuesday rather than on the worst possible day. Repeat the drill when the app's export format changes or you set up a new backup routine, not on every export.
Migrating to a different assistant
Moving between products is mostly worse than people expect: an export is designed to be read, not re-imported, and most assistants won't take another's file at all. Anthropic says plainly that a Claude export can't be imported into another Claude account, let alone a rival.
There is one real exception, and it is worth knowing about even if you decide against it. Gemini accepts ChatGPT and Claude export ZIPs directly — full chat history, and separately a summarised version of your remembered facts and preferences. Files up to 5 GB, up to five a day, and the import can take a day to finish; a partial import has to be deleted and retried. It's unavailable on work or school Google accounts, to under-18s, and (significantly) in the EEA, Switzerland and the UK.
Read the trade before you use it. Handing over an export isn't like moving a folder: what you import becomes part of your Google Activity, and Google's own help page says that content may be used to improve its services, including training generative AI models. You would be taking years of conversations that currently sit in one company's account and adding them to another company's training-eligible record of you. If the reason you're migrating is privacy, this particular route runs the wrong way, and exporting to a local archive you keep yourself is the move that matches the motive.
Migrating to a new machine
Migration is a restore with one extra hazard: both sides may hold real work, and merging them badly can duplicate or overwrite it. Do it in this order.
Export from the old device first, and open the file before you touch anything on that machine. Confirm the archive isn't zero bytes and actually opens. A surprising number of migrations fail because someone wiped the source right after clicking Export and only discovered afterwards that the download had been interrupted.
Then decide what should win. Any import worth using asks how to handle records that exist on both sides, and the two answers serve different situations:
- Keep what is already here (Secret Chat AI's default: Do not replace existing records): the local version wins, and only genuinely new material is added. This is the correct choice when you're merging two machines that both have work you want.
- Let the file win (Replace existing records), the imported version overwrites. This is for restoring onto a browser whose data is damaged, stale, or otherwise not to be trusted.
The failure to avoid is picking "replace" for a merge. If you edited a project's instructions on the new laptop last week and then import a two-month-old export in replace mode, the old file quietly wins. Merge mode never destroys anything, which is exactly why it's the default.
Two more habits worth having. Migrate in one direction. Pushing exports back and forth between two active machines is a synchronisation problem, and import modes aren't a synchronisation engine — pick one device as authoritative, move the history there, and retire the other. And keep the old device's history until the new one is verified, then clear it deliberately rather than leaving a full copy of your conversations on a machine you're about to sell or hand down.
Export one thing, not everything
Full exports are for disasters. Most days, the useful move is smaller: exporting a single chat or a single project, which produces the same kind of archive scoped to one piece of work.
This turns out to be a privacy tool in its own right. If a colleague needs the research thread behind a decision, sending them one project export gives them exactly that, rather than your entire history, which is what a full backup would hand over. The same granularity lets you archive a finished project, remove it from the browser to keep the workspace clean, and still have it if the client comes back a year later. Treat "export everything" as a safety net and "export this" as an everyday action, and both stay in shape.
Back up on events, not on Tuesdays
Calendar reminders for backups get dismissed. Triggers tied to what you're already doing don't:
- Before you clean anything. Any time you're about to clear site data, run a cleaner, or change privacy settings — export first. This is the one rule that prevents the most common loss.
- When a piece of work finishes. The natural moment to archive a project is when it ends, while you still remember what it was.
- Before a browser or OS upgrade, and before installing or removing the app on a device.
- On a rhythm you already have. If you do a weekly review or a monthly close, attach the export to it.
For most people that comes to a handful of exports a year plus one habitual click before any cleanup — far more effective than an ambitious weekly schedule nobody keeps.
Retire old copies deliberately
Backups accumulate, and every one of them stays exactly as sensitive as the day it was made. An export from March still contains March's confidential material, months after you stopped thinking about it. A folder of eleven old archives is eleven copies of your private conversations, each sitting on a machine or in an account whose security you may no longer be tracking.
So set an expiry the way you would for paper records. Keep the current archive, keep last quarter's, and destroy the rest — deleting the file from every place it was copied to, including the cloud folder's own trash, which retains deleted items for weeks. If you retire a project entirely, retire its export with it. Having a backup and having an unbounded pile of them are different things, and only the first is good practice.
What backing up does not do
Two honest limits, because a guide that only sells the upside isn't much of a guide.
A backup is a copy, not a shield. Its security is whatever you gave it: the encryption you applied, the passphrase you chose, and the safety of the places you put it. Exporting doesn't make anything safer by itself; it makes it survivable, which is a different property. Handled carelessly, it makes things measurably worse.
None of this changes what happens when you send a prompt. Local storage and local backups are about where your history lives afterwards. To answer you, the model still receives your message. What a privacy-focused gateway changes is the link between the message and you: no profile is built, no chat is associated with your identity, queries reach the models anonymously, and they're never used for training. Secret Chat AI removes you from your queries — it does not remove the data from your messages. Redacting identifying details before you send remains yours to do, backup routine or not.
The ten-minute version
If you do nothing else with this article, do this once today:
- Export your full history from Settings, in Secret Chat AI that's Settings → Export All Data, which produces a dated ZIP.
- Wrap it in an AES-256 encrypted archive and save the passphrase to your password manager.
- Put one copy somewhere off the machine.
- Import it into a scratch browser profile and confirm your three most important conversations are intact. Delete the profile.
- Set yourself one rule: never clear site data before exporting.
History that lives on your device is yours in a way cloud history never is, including the responsibility for keeping it.
That trade is worth making. The absence of a vendor-held archive is precisely what makes these conversations unreachable through someone else's servers. The cost is a ZIP file and a habit. See exactly how export and import work in the app, or start a private AI chat and keep your history where you can actually control it.
Frequently Asked Questions
- How often should I back up my AI chat history?
Tie it to events rather than to a calendar. Always export before clearing site data, running a privacy cleaner, changing browser storage settings, or upgrading a device; that single habit prevents the most common cause of loss. Beyond that, export when a substantial piece of work finishes, and attach a full export to a rhythm you already keep, such as a monthly review. For most people that comes to a handful of exports a year plus one click before any cleanup.
- Is my exported chat history encrypted?
Usually not, and Secret Chat AI's export deliberately isn't; it's a plain ZIP so that any tool can read it and you can never be locked out of your own data. That makes it portable and makes it dangerous: anyone who obtains the file can read every conversation and every attachment in it without a password. Encrypt it yourself before storing it anywhere, using AES-256 in 7-Zip, an encrypted disk image on macOS, or a VeraCrypt container. Avoid the legacy ZipCrypto option, which is known to be weak.
- Does full-disk encryption like BitLocker or FileVault protect my backup?
Only while the machine is off or locked. Once you're logged in the volume decrypts transparently, so anything running as you can read the file, and any copy you upload to cloud storage, email to yourself, or put on a USB stick carries no protection whatsoever. Full-disk encryption protects a stolen laptop; it does nothing for a copied file. Encrypt the archive itself if it's going to travel.
- How do I move my AI chat history to a new computer?
Export from the old device first and confirm the file actually opens before you wipe anything. Install or open the app on the new device, then import the archive and choose how conflicts should be handled: keep existing records when you're merging two machines that both hold real work, or replace them when restoring over data you no longer trust. Verify the new machine looks right, then clear the old one deliberately, especially if you're selling or handing it on.
- What happens if I import a backup onto a browser that already has chats?
It merges rather than wipes. Nothing already in the browser disappears just because it's absent from the file. For records that exist on both sides, your chosen mode decides the winner: the default keeps the local version and adds only genuinely new material, while replace mode lets the file overwrite. Choosing replace for a merge is the one mistake that can lose recent work.
- Can I export just one chat instead of my whole history?
Yes, and it's usually the better option. Exporting a single chat or a single project produces the same kind of archive scoped to that one item — useful for handing work to a colleague without shipping your entire history, and for archiving something finished so you can remove it from the browser and still keep it.
- How is this different from exporting my ChatGPT or Claude data?
Those exports are copies; the originals stay in the provider's account database, which is why the download links are short-lived — both expire 24 hours after delivery, and a ChatGPT export can take up to seven days to arrive. When your history lives in your browser instead, the export isn't a duplicate of a server-side archive, because no such archive exists. It's the only other instance of your data, which is why storing and verifying it properly matters far more.
- Does keeping backups affect my privacy when I chat?
No. Backups are about where your history lives after a conversation; they change nothing about the request itself. To answer you, the selected model still receives your prompt. What an anonymizing gateway changes is the link between that prompt and you; no profile, no association with your identity, and no use of your queries for training. Secret Chat AI removes you from your queries; it doesn't remove the data from your messages, so redacting sensitive details before sending is still your call.
Sources
- OpenAI Help Center: Exporting your ChatGPT history and data
- Anthropic Privacy Center: Export your Claude data
- 7-Zip documentation: AES-256 encryption and the 7z format
- ZIP file format: traditional encryption and its known weaknesses
- MDN: Storage quotas and eviction criteria
- Google — import ChatGPT and Claude history into Gemini
- Anthropic — export your Claude data