Privacy

Reading the site

We count visits with the analytics described below. You can turn it off at the bottom of this page. Hosting infrastructure may keep access logs for reliability and abuse prevention. Your color-theme preference is stored in your browser.

Optional analytics

Analytics is on by default. One switch at the bottom of this page turns off both of the tools below.

Our own counter. We store a random code in your browser to count return visits and actions such as opening a guide or copying code. The code is replaced after 28 days. We do not attach it to your name, profession, employer, or other devices. These records contain page paths, not search text, chat content, names, or raw IP addresses. They expire within 90 days.

Google Analytics. We use Google Analytics to understand which pages are read and how visitors arrive. Google sets first-party cookies and receives page addresses, referring sites, scroll depth, outbound link clicks, file downloads, and general device and location information. Google Analytics does not log or store IP addresses. We have turned off Google signals and ad personalization, and we do not send search text, chat content, or form input. Google processes this data under its own privacy policy.

Turning analytics off stops both tools, removes our browser code, and deletes the Google Analytics cookies from this site.

Chat history

By default, your current conversation stays in this tab's session storage. Choose "Remember chats" before starting a conversation to keep it for 30 days. A private browser cookie lets you reopen your conversations without an account.

Saved message content is encrypted in the database. The cookie is stored as a keyed hash, not as its readable value. Other browsers cannot access your conversations without that cookie. You can delete conversations from the History menu. Clearing the cookie removes this browser's access; stored conversations expire after 30 days.

AI processing and web research

Your question, limited recent conversation, and relevant sources are sent to the model provider configured by the operator. Supported routes include Microsoft Azure, GitHub Copilot and OpenRouter. OpenRouter forwards requests to a configured upstream model provider. If an approved fallback is enabled, another configured provider may process a retried request.

When a web search is needed, the site sends a generic public cloud-cost query rather than private account identifiers or the full conversation. Providers and their search services may process or retain requests under their own service and abuse-monitoring policies. We do not treat different providers as having identical retention policies.

Do not paste credentials, personal information, contracts, or private bills. Operational logs contain model and provider identifiers, usage totals and error codes, not raw conversations. Optional saved history is separate from those logs.

Audio

Pressing Listen sends the displayed narration text to Azure's audio service. Public guide and briefing audio may be cached for 30 days. Chat-response audio requires a short-lived signed token and is not stored in the shared audio cache.

Operator access

The private console uses Microsoft Entra ID and essential session cookies. These are not needed to read the site. Operator configuration changes are audited.