The studio / Privacy
Privacy
What the learning pages, inquiry form and optional research saving keep, in plain words.
What this site stores by default
The learning pages do not create a research profile. Research event collection is currently off. Hosting providers may process technical request logs to deliver and protect the service. The inquiry form emails your message to the studio; there is no separate database of inquiry content. Protected requests also create the temporary abuse counters described below.
Atlas practice and Park
Practice choices stay in this page's memory and disappear when you leave. Park stores only selected concept IDs in local browser storage. This list is not sent to the studio and is not research participation. Anyone sharing the browser can see it. Use “Clear parked concepts” in the Atlas or clear browser storage to remove it. There is no account or cross-device sync.
The AI use check
The check runs in your browser. Nothing leaves the page until you choose to save your result at the end. If you close the page before that, nothing was kept.
Why saving exists
Your answers and result are kept so you can return to them and take a 30-day recheck, and so the studio can count, in aggregate and never by name, which habits and gaps are common among people who save a result.
What saving stores
When you tick the box, you agree to this statement, word for word:
Save this result? We keep your answer codes, result and email for your 30-day recheck and aggregate counts. No free text or company name from this check is stored. Our hosting, database and email providers process the data to operate this service. Private return and deletion links are sent only to your email. If delivery fails, your result may still be stored; contact the studio for help after email ownership is verified.
In practice that means: the option codes for your answers, which claims you flagged in the drill, the result those produce, the email you typed, the consent version you agreed to, how long the check took, and a short code for where you came from (for example a social link). Text you wrote in your own words has no field in the request and is never sent.
Saving also records a hashed retry identifier and a delivery receipt: purpose, attempt time, state and provider message ID when available. A saved result can exist even if email is unconfirmed. Private return links are sent only to the supplied inbox; the save response gives a reference, which does not grant access. The database retains only a hash of each access token. Anyone with a private email link can view that result and delete all records associated with that email. If mail fails, contact us below; we verify email ownership before restoring access or deleting records.
What is never stored
- Anything you typed in your own words
- Your name, company, phone number or job title
- The names of tools or accounts you use, tied to you
- Your raw network address in the application database. Abuse counters use a keyed hash, are not joined to results, expire from decisions after at most 70 minutes, and are removed on the next protected request or maintenance run. Cleanup may be delayed during inactivity or outages.
- Anything from a real inbox, file or account; the check never connects to one
How long, and how it ends
Without saving: no research record. When you save: email, answer codes, results and delivery receipts are kept for the recheck and aggregate analysis until you request deletion. Saving does not require findings emails. Aggregate publication uses minimum sample and cell rules; these reduce disclosure risk but do not establish mathematical anonymity.
The private return page lets you delete your email, answers, results and associated delivery receipts. Email copies already delivered and provider operational logs are outside this application deletion. Contact the studio if you have lost your link.
Consent text v0.2 for How well do you AI?, instrument v0.2, Study 001.
Abuse limiting
To limit repeated inquiry and research requests, the server stores counters keyed by a secret hash of the network address and route purpose. The application database does not store the raw address or join these counters to results. Ten-minute buckets expire from decisions after at most 70 minutes. Old buckets are removed on the next protected request or maintenance run; inactivity or outages may delay physical cleanup. Hosting-provider logs are separate.
Who processes data
- Vercel hosts the site and runs its server code.
- Resend sends the inquiry emails and, if you save a check result, your return link and recheck invitation.
- Neon hosts saved check results in a dedicated PostgreSQL database in AWS US East (Northern Virginia). The site accesses it through server routes; the browser never connects to the database. Authorized studio operators can also administer the database.
Research answers are not sold or shared with advertisers. The providers above process data to operate the service. Research participation is separate from learning inquiries and any future paid offer.
How to delete
Every email about a saved result carries a delete link. Open it and confirm; your email, your answers and your results go together, at once. If you no longer have the email, write to the studio through the form below and say roughly when you saved; the studio deletes on request.
How to contact the studio
Use the inquiry form on the home page. Questions about this page are welcome; so are corrections.
Policy text v0.2, 2026-10-29. Research consent remains draft; collection is closed.