This portal is backed by Cloudflare D1 sessions and R2 documents via /functions. Your Lodgix and Gemini keys stay server-side.