Venice AI
Private uncensored assistant covering text, image and video, with a genuinely free tier.
- $18/mo
- Free tier
- No card
- Freemium
Uncensored does not mean anything goes, and no tool on this page promises that. Every service still has an acceptable use policy, still refuses some categories outright, and still operates under the law of wherever it is hosted. What varies is how much a model refuses that is legal and harmless, which is the actual complaint behind most searches for AI with no restrictions.
So this hub does not rank tools by how permissive they claim to be. It records what each one documents: the filter level, what the vendor still prohibits, whether the model runs on your own machine or on someone else's, whether an account is required at all, which model options are available, how long conversations are kept, and whether they are used for training.
Local and open-weight options are included alongside hosted services, because for a lot of people the answer to "AI with fewer restrictions" is running the model themselves. That trade is compute and setup effort in exchange for no retention and no third party reading anything.
Ordered by editorial review. Click rankings for this category begin once enough listings clear our publishing thresholds. How we rank.
Never listedClothing removal from photographs of real people, sexual imagery of real people, and anything involving minors. Refused permanently, and refused by the schema rather than by a promise. What we will not list
Private uncensored assistant covering text, image and video, with a genuinely free tier.
Runs open models on your own hardware, free, with nothing leaving the machine.
Runs open models on your own hardware from a terminal, free and unlimited, fully offline.
Unfiltered chat, images and an API, sold in 30-day blocks for cryptocurrency with no auto-renewal.
Unfiltered assistant with images, video and an API, built around a claim that nothing is retained.
One self-contained executable that runs models on your own hardware. No install, no account, no service.
Free open-source desktop AI that runs offline, with a written promise that nothing leaves your computer.
Free MIT-licensed desktop software that runs models on an ordinary laptop, with no GPU needed.
Runs language models on your phone itself. No account, no connection, nothing uploaded.
Self-hosted chat front-end that runs entirely offline, on your own infrastructure.
Local model desktop app with character modes and extensions. Open source, and it states zero telemetry.
MIT-licensed desktop assistant that runs on your own computer, with no accounts and no token limits.
Roleplay, characters and image generation running on the phone itself, with most modes fully offline.
One file that is both the model and the program. No installer, no account, maintained by Mozilla.ai.
Nothing matches those filters. to see all 14.
The facts that decide whether to trust a tool rather than whether to try it. Every value is taken from the vendor's own published pages on the date shown on each listing. A blank is never a guess: where a vendor publishes nothing, the cell says so.
| Tool | From | Age check | Trains on your content | Deletion | Filtering | Minors policy | Jurisdiction |
|---|---|---|---|---|---|---|---|
| Venice AI | $18/mo | Self-declared at signup | Not documented | By request | No documented output filter | Published | Wyoming, United States |
| LM Studio | On request | None stated | No | Your own files | No documented output filter | Not applicable | United States |
| Ollama | $20/mo | None stated | No | Your own files | No documented output filter | Not applicable | United States |
| Uncensored Chat | $9/mo | Self-declared at signup | Not documented | In account | No documented output filter | Published | India, with exclusive jurisdiction in the courts of New Delhi |
| NoFilterGPT | $11.99/mo | Self-declared at signup | Not documented | In account | No documented output filter | Published | United States, by governing law. No state or entity is named |
| KoboldCpp | Free | None stated | No | Your own files | No documented output filter | Not applicable | Not applicable, open-source project |
| Jan | Free | None stated | No | Your own files | No documented output filter | Not applicable | Not stated in the privacy policy |
| GPT4All | Free | None stated | No | Your own files | No documented output filter | Not applicable | Not stated in the repository |
| PocketPal AI | Free | None stated | No | Your own files | No documented output filter | Not applicable | Not applicable, open-source project |
| Open WebUI | Free | None stated | No | Your own files | No documented output filter | Not applicable | Not applicable for the self-hosted software |
| Text Generation WebUI | Free | None stated | No | Your own files | No documented output filter | Not applicable | Not applicable, open-source project |
| AnythingLLM | Free | None stated | No | Your own files | No documented output filter | Not applicable | Not stated on the site |
| Layla | Not published | None stated | No | Your own files | No documented output filter | Not applicable | Not stated on the site |
| llamafile | Free | None stated | No | Your own files | No documented output filter | Not applicable | Not stated in the repository |
The comparison that matters is not the same in every category. These are the questions that separate a good choice from a bad one here specifically, and why each one earns its place.
Every hosted service here refuses something, and a vendor that names its exclusions in three lines is more useful than one claiming to refuse nothing. A short explicit list tells you where you stand before you invest time in a workflow; a vague policy tells you only that you will find out by being refused.
This is the fork the whole category turns on. A local or open-weight model has no retention policy because nothing leaves your hardware, at the cost of setup and compute. A hosted service is easier and means someone else holds your conversations under terms they can change.
Anonymous use is the strongest privacy position a hosted service can offer, and almost none of them offer it. If a tool works without a signup, that fact outranks most of its feature list, because it removes the identifier that links everything else back to you.
They get conflated constantly. A service can delete your conversations and still have trained on them, and it can retain them for a year and never train on anything. Ask both, and treat silence on either as a no answer rather than as a no.
A tool offering one fine-tuned model is a bet on that model staying available and staying permissive. Access to several, or an API you can point elsewhere, is what stops a policy change at one provider ending your workflow.
Findings from assessing every candidate in this category against the same checklist, including the ones that are not listed. A gap that every vendor shares is a fact about the category rather than a complaint about one product.
In practice it means a model that has had its refusal behaviour reduced, so it answers requests a mainstream assistant would decline. It does not mean the service has no rules. Every hosted tool listed here still publishes an acceptable use policy and still prohibits specific categories, and each listing records what those are.
No hosted service has none. The closest thing is running an open-weight model on your own hardware, where refusal behaviour is a property of the model you chose rather than a policy someone enforces on you. Even then, what you do with the output is still governed by law. Listings here mark which tools support local or self-hosted use.
Hosted ones do, for a period the vendor sets, and some use conversations to improve their models unless you opt out. Each listing records the stated retention period, whether training on user content happens, whether an opt-out exists and where to find it, with a link to the policy the answer came from.
Not always. A few allow anonymous use with no signup, which is the strongest privacy position a hosted service can offer. You can filter the grid above by No account needed to see only those. Local models require no account by definition.
No, and it is the hub on this site least defined by that. A large share of demand for models with fewer refusals is about creative writing, security research, medical questions and roleplay that mainstream assistants decline for reasons unrelated to sex. Most of the grid above is local model runners that ship no content of their own at all. Adult capability is one property recorded per listing, not the definition of the category.
Every directory in this category claims a standard. Ours is written as the four things we refuse, rather than as a promise to be careful, because a standard nobody can check is the same as no standard at all.
These refusals are permanent. They apply regardless of how much traffic the category would send, and each one is enforced by the software that stores these listings rather than by anybody remembering it.
The field that records this on a listing has exactly one legal value: not offered. There is no value that means yes, so a tool with that capability cannot be described by our schema, cannot be saved, and cannot be published. It is a shape in the data model, not a rule anybody has to remember to apply.
Including public figures, and including any product that builds a character from an uploaded photograph of somebody. A tool that puts a real person's face into adult material is refused on the same grounds, whatever the vendor calls the feature. Invented characters from a text prompt are what this directory covers, and that distinction is the whole line.
In any context whatsoever. A second word list fails this build on every page, including the pages written to state the refusals, which is why those pages describe this without using the vocabulary such products market themselves with. Credible reporting that a product generated this material excludes the vendor no matter what its own terms claim, because a policy page is a statement and a product is evidence.
Services that distribute that material are refused, and so is anything sold around it. If a listed service has been used against you, the removal request page is linked from every page on this site, is never hidden behind a menu, and is acknowledged by a person within 48 hours.
Refusals are enforced at the domain level as well as the word level, because a service can rename itself out of a word list overnight and keep the same infrastructure. Every vendor we assessed and turned down is named on assessed but not listed, with the reason and the date, including the ones refused on something they published themselves.
We do not chase the excluded keywords either, and they carry more search volume than everything ClickTug does cover. That is the trade: a smaller market, and a directory that is still here in five years. ClickTug also hosts no explicit images or video at all. Listings use vendor logos, interface screenshots and dashboards, and the build rejects any image loaded from a host other than our own.