Privacy Policy

What We Collect

When you submit a system for testing, we collect: the email address you provide, the system prompt / tool list / description you submit, your IP address, your browser's user agent, and the timestamp of submission. When you subscribe to update notifications, we collect your email address. We also log basic, anonymous page-view analytics (the page path, referring page, and a country derived from your network location) across the site.

Why We Collect It

Email and submitted content are used to run the assessment you requested and deliver results to you. IP address and timestamp are retained specifically as part of the authorization record described in our Terms of Service — since we rely on your attestation that you're authorized to have a submitted system tested, this record exists to establish who submitted what and when, in case of a dispute or legal request. Page-view data is used in aggregate to understand traffic and is not tied to your identity.

What We Don't Do

We do not sell your personal data. We do not share submitted system prompts or assessment content with third parties except: (a) our infrastructure providers (Supabase for database hosting, Vercel for application hosting) acting strictly as data processors under their own security and privacy commitments, and (b) where required by law, or in response to a good-faith claim that a submitted system was tested without proper authorization, as described in our Terms of Service.

Data Retention

Submission content, results, and associated email addresses are retained for as long as reasonably necessary to provide the service, resolve disputes, and comply with legal obligations. You may request deletion of your data at any time (see "Your Rights" below), subject to our right to retain records required for the authorization/audit trail described in our Terms of Service.

Cookies & Tracking

We use Supabase Auth session cookies for the admin login system. We do not use third-party advertising or tracking cookies. Our page-view analytics are first-party and do not use cookies to identify individual visitors.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at the address on our homepage. We will respond to verified requests within a reasonable timeframe, subject to the retention exception noted above for authorization/audit records.

Security

We use industry-standard practices to protect data in transit and at rest, including encrypted connections and access-controlled infrastructure. No system is perfectly secure, and we cannot guarantee absolute security of any data transmitted to us.

Children

The Service is not directed at, and we do not knowingly collect data from, anyone under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after a change constitutes acceptance of the updated policy.

Contact

Questions about this policy can be sent to the contact address listed on our homepage.