Privacy

Privacy policy

Updated 21 October 2026.

This site records how it is used, in detail, so I can see what visitors look for and improve the site, the demo and my services. This page lists everything it records, why, who can see it and how long it is kept. It is written plainly and is complete, but it is not legal advice.

Who is responsible

Joel Stevick, a sole proprietor in Maryland, USA, runs this site and decides what is done with what it records. Write to [email protected] about anything on this page.

What the site records as you use it

Each browser gets a random id in a cookie (vid). A visit is a run of activity with no gap of 30 minutes or more. Each visit and each thing done in it is stored with that id.

About each visit, from your request:

your full IP address;
your browser's user agent (browser, version and operating system);
your browser's preferred language;
your location as Cloudflare works it out from your IP address: country, region, city, postal code, latitude and longitude, and time zone. This can be precise to a town or neighbourhood;
your network: its number (ASN) and organisation, and the Cloudflare data centre that served you;
when the visit started and ended, and when your browser was first and last seen.

From the page, through a small script (track.js):

each page you view, with its address and query string, and the page a visit started on;
the page that sent you here (the referrer);
campaign tags in the address (utm_source, utm_medium, utm_campaign, utm_term, utm_content);
your screen and window size and your device's time zone;
how long you stayed on each page, and how far down it you scrolled, in steps of 25%;
every click on a link, a button or a marked element: its text (up to 120 characters), where it links, its id and a short description of where it is on the page;
each form you submit, by the form's name (not what you typed: the forms store that themselves, below);
links you follow to other sites;
each of these is stored as an event with its type, its time, its details, and a random id and counter for the page view it belongs to, so nothing is counted twice.

The site also records, under the same id, when you send the contact or register form, confirm your email, sign in, open a demo, upload to the demo and ask it a question:

your email address, once you give it in one of those ways. It is then linked to everything recorded under your id, before and after;
which inquiry, registration, service, demo or project it was;
for the demo, each file's name, its page and character counts, and which question was asked;
whether the visitor is one of the site's admins, or looks like a bot.

Keystrokes, mouse movement and recordings of your screen ("session replay") are not recorded.

What the forms and the demo keep

Contact form: your name, email, company, the service you pick and your message, and a one-way hash of your IP address used only to limit how many messages one address can send.
Register form: the same, with your phone if you give it and how you want to pay. It waits 48 hours for you to confirm your email, then is deleted if you don't. Once confirmed, it opens a project record for you.
Sign in: your email and a hash of the sign-in link and of your session, kept while they are valid.
The demo: your PDFs are read in your browser and never uploaded. Only the text of each page and the file name are sent. The demo's search index (the text cut into passages, and their vectors) is deleted after 10 days without an upload or a question. A copy of each page's text, your questions, the answers and the passages they cite are kept for up to 25 months to analyse and improve the demo and to build evaluation sets ("golden sets") of questions and source text for testing chatbots. In the EEA, the UK and Switzerland they are kept only with your consent; without it, your questions and answers are deleted with the search index after 10 days, and no copy of the text is kept.
Payments: if you save a card or bank account, Stripe holds it; this site keeps only Stripe's reference to it.

Cookies

vid: The random id your activity is recorded under. 13 months. Not set in the EEA, the UK or Switzerland unless you accept.
consent: Your answer to the consent banner, so it is not asked again. 13 months. Needed for the site to work.
session: Keeps you signed in. 30 days, or until you sign out. Needed for the site to work.
signed_in: Tells the pages to show your account links. 30 days. Grants nothing by itself.
admin: Tells the pages to show the Admin link to an admin. 30 days. Grants nothing by itself.
demo: Opens your demo on this browser. 14 days. Needed for the demo to work.
registered: Remembers that you have registered, to word the demo's button. 12 months.

The contact and register forms use Cloudflare Turnstile to tell people from bots; Cloudflare's own privacy policy covers it.

Why

To see how the site is used and improve it.
To improve the demo and my services, and to build evaluation sets for chatbots from demo text and questions.
To answer you and follow up with you about the work you asked about.
To keep the forms and the demo working and free of abuse.

Who can see it

Joel Stevick, and admins he adds, through a private admin page. The services that run the site process it for me, each only for its part: Cloudflare (hosting, the databases and the demo's search index), Stripe (payments) and Anthropic (the demo's answers: your question and the passages it is answered from). I don't sell or rent what the site records, and I don't share it with advertisers.

How long it is kept

Visits and everything recorded in them: 25 months, then deleted.
The demo's questions, answers and archived page text: 25 months, then deleted (or 10 days, without consent in the EEA, the UK and Switzerland).
The demo's search index: deleted after 10 days without use.
Messages from the contact and register forms, and project records: for as long as they are needed to answer you and run the project, and as the law requires for business records.

A copy, or deletion

Email [email protected] to ask for a copy of what the site holds about you, or to have it corrected or deleted. For now this is done by hand, within 30 days.

If you are in the EEA, the UK or Switzerland

The controller is Joel Stevick, a sole proprietor, Maryland, USA, [email protected].

Legal basis. Recording how you use the site, and keeping the demo's text and questions for 25 months, rest on your consent: nothing is recorded until you click Accept on the banner. The forms and the demo itself rest on a contract, or steps you ask for before one: they are needed to answer you and to show you the demo. The limits that keep the forms and the demo free of abuse rest on my legitimate interest in keeping them working.

Your rights. You can ask to access, rectify or erase what is held about you, to restrict or object to its use, and to receive it in a portable form. You can withdraw consent at any time with the Privacy choices link in every page's footer; nothing more is recorded from then on. You can complain to your data protection supervisory authority.

Transfers. The site is run from the United States, and what it records is stored and processed in the United States and wherever Cloudflare, Stripe and Anthropic process it. Those transfers rely on your consent and on the contracts those services offer.

Privacy choices

Open the consent banner to accept or decline recording on this browser, wherever you are. Declining deletes the vid cookie, and nothing more is recorded from this browser. What was already recorded is kept until you ask for it to be deleted.

Changes

When this policy changes, the date at the top changes with it.