Privacy

Privacy

What this site collects, what it keeps, who handles it and for how long.

In short

  • This site sets no cookies and writes nothing to your browser’s storage.
  • It does not keep your questions to the assistant or its answers.
  • Its own records never hold your network address. To limit use, it keeps a scrambled code made from the address with a key that is replaced every day, and deletes both after that day.
  • It keeps daily counts, such as how many questions were answered. They hold no text and nothing that points to you.
  • It keeps what you send through the contact form for 180 days, then deletes it. Only the site owner reads it.
  • If you choose WhatsApp on the contact form, your chat with the site owner happens in WhatsApp, and this site keeps no copy of it.
  • Please do not type personal or sensitive information into the assistant.

Reading the site

Cloudflare hosts this site. Like any web host, it sees your network address and browser details when you load a page. If Cloudflare’s security features block or challenge a request, Cloudflare keeps that request’s address, the page it asked for and the browser’s name in a security log for 24 hours. This site cannot shorten that.

The assistant

The assistant answers questions from the approved pages of this site and nothing else. An AI model writes each answer, so an answer can be wrong: check the linked sources.

Some questions, such as who a client was, get one fixed reply straight away and are never sent to an AI model.

Any other question may be sent to one AI service, together with the published text the answer draws on and up to two earlier questions and answers from the same conversation. Only services that are switched on for this site are used. They are tried in this order, and the next one is used only when the one before it cannot answer, for example because its free daily allowance is used up. When none can answer, the assistant says it is resting and the question goes nowhere else:

  1. Workers AI, run by Cloudflare. Your question reaches it through a Cloudflare service called AI Gateway, whose logging is turned off, so the gateway keeps no copy of your question or the answer.
  2. A business AI platform the site’s owner has access to. Your question may be passed to that platform and to the company that developed the AI model it runs.

Please do not type personal or sensitive information into the assistant, such as names, contact details, passwords or keys.

The contact form

The contact form is the only way to reach the site owner through this site. It takes a project inquiry or a security report.

  • What it asks for: for a project, the kind of project, the problem, the result you want, and how you want to be answered: WhatsApp, or email with your email address (asked for only when you choose email); optionally the technologies involved, a timeline, a budget range and your first name or a handle. For a security report, a description and, optionally, a way to reply and your first name or a handle.
  • Why: only to reply to you and to decide whether the work is a good fit, or to deal with a reported problem.
  • Before it is stored: the site removes invisible and control characters from your text, and replaces common kinds of passwords, keys and tokens with a note saying something was removed. Not every secret can be recognised, so please leave them out. Your email address and any other contact details you chose to give are kept.
  • Where and who: your message is stored in the Cloudflare database that belongs to this site, with the time it was sent and a status the owner uses to sort messages. No page or address of the site shows it. Only the site owner reads it, from his own computer. The site itself sends no email or other notice about your message.
  • How long: the daily clean-up deletes it 180 days after it was sent. Cloudflare’s database can restore deleted data for up to 7 days, so it is fully gone within 7 days after that. The owner may also save a working copy on his own computer. His reading tool marks each copy with a delete date (when the oldest message in it expires, and at most 30 days after the copy was made) and deletes it the next time it runs after that date, so a copy can outlast that date until the tool is next used.
  • Limits: five messages a day can be sent from one network. They are counted under the same scrambled daily code the assistant uses, which is deleted soon after the day ends.
  • Saved or not: when you press Send, the page sends your message to the site once and tells you whether it was saved. If the site answers that it was not saved, the owner did not receive it. If the connection drops before the site answers, the page says it cannot confirm either way, since the message may have arrived. In both cases what you typed stays in the form so you can send it again.
  • WhatsApp: if you choose WhatsApp for a project, the site owner’s WhatsApp number is not on any page of this site. It is shown to you only after you press Send and the bot check has passed, in the site’s answer: a link, “Continue on WhatsApp”, that opens a chat with him through WhatsApp’s link service. The link fills in a short summary of your message: your choices and the start of what you typed, after the same cleaning and removal of secrets as the stored copy. You can change it before you send it. If the bot check passed but the site’s database could not save your message, the page says it was not saved and still shows the link. If the bot check did not pass, if the day’s limit for your network was reached, or if anything else went wrong, no link and no number are shown. If the site has no WhatsApp number to offer, the choice is taken away and an email address is asked for instead. The chat itself happens in WhatsApp, between you and the site owner, under WhatsApp’s own terms and privacy policy: this site is not part of it, never sees it and keeps no copy of it. Once you send a message there, the site owner sees your WhatsApp number and profile, as in any WhatsApp chat.

To ask for a copy of what you sent, or for it to be corrected or deleted, use the same form. Please do not put passwords, keys or other secrets in a message.

What the site keeps

  • Your questions and the answers: not kept. They pass through the site’s server to answer you, and the site does not write them down anywhere.
  • A session code: after your first question passes the bot check, the site gives this page a signed session code that lasts one hour. The page holds it in memory only, so it is gone when you close or reload the page.
  • The conversation so far: the page keeps your last two questions and their answers in memory, signed by the site so they cannot be changed, and sends them with your next question so a follow-up makes sense. The site does not keep them.
  • A question count for each session, stored under a random session number, so one session cannot ask without limit. A daily clean-up deletes it within about two days.
  • A question count for each network per day, stored under a scrambled code made from your network address (for IPv6, from its network part only) with a random key made for that day. The daily clean-up deletes the day’s codes and its key soon after the day ends at midnight UTC, so the codes cannot be traced back to an address. It runs with the first question asked from five minutes after midnight UTC, and a daily check shortly after that starts it on days with no questions; if that check is missed, the next question or the next day’s check starts it.
  • Daily counts: how many questions were answered or refused, which AI service answered, how long answers took, and how many contact messages were saved or refused by the daily limit. They hold no text, address or session code. For now they are kept with no end date; when the site starts deleting them on a schedule, this page will say after how long.
  • Event lines in Cloudflare’s logs for this site, such as that a question was answered or refused or that a message was saved, with the time and a random request number. They hold no text, address or session code, and Cloudflare keeps them for 3 days.

The counts and codes are stored in a Cloudflare database that belongs to this site.

The bot check

The assistant and the contact form use Turnstile, a check run by Cloudflare, to tell people from bots. On the assistant page it loads only when you start a question, by typing one or choosing a suggestion, and the page has no session yet. On the contact page it loads once you start filling in the form. Turnstile checks signals from your browser, including your network address; Cloudflare says it uses them to detect bots and to improve that check. The site checks the result once with Cloudflare and does not keep it.

Cookies and browser storage

This site sets no cookies and writes nothing to your browser’s storage. Turnstile is Cloudflare’s own service, and anything it keeps in your browser is set by Cloudflare under its own terms.

Changes

When what the site does changes, this page changes with it.

Last updated