Cookies & Privacy
Cookies we use
- uth_consent — stores essential or all as your purpose preference so the site can remember your choice.
This is a first-party cookie with no cross-site tracking. essential keeps required site purposes on without Analytics; all enables optional Vercel Web Analytics. We use no advertising or third-party marketing cookies.
Cookies and browser storage are different. The former uth_session localStorage identifier has been removed; Ask creates no stable analytics user or session ID in browser storage. Ask uses functional sessionStorage to keep completed answers temporarily in the same tab. This storage is not controlled by the cookie-consent choice.
Temporary Ask history
Completed answers and no-answer results may remain in this tab for a sliding 30-minute inactivity window, capped at two hours from when the thread began. The history holds at most 10 completed turns and 64 KiB. Drafts, requests in progress, errors, security tokens, request identifiers, and analytics metadata are not kept.
Reloading or navigating within the same tab can restore that temporary history. sessionStorage is normally isolated per tab, although a duplicated tab may begin with a copy and browser crash or session restore may preserve it. Automatic expiry and Clear history are best-effort browser-storage operations. Ask history is never saved to the server or analytics, and cookie consent does not enable or disable it.
Analytics
Optional usage measurement. Vercel Web Analytics loads only after you choose Accept all. It uses no cookies or localStorage. Vercel creates a server-side, request-derived hash that changes every 24 hours rather than storing a persistent browser identifier. Choosing essentials or making no choice keeps Analytics off.
Analytics receives the page URL or dynamic path, referrer, filtered query parameters, inferred city, region and country, and browser, operating-system and device information. No Ask question or answer content is sent to Analytics.
Separate anonymous operating counters may measure the number of Ask questions, answer / no-answer rates, and latency. They contain no question, answer, prompt, transcript, generated content, IP address, browser metadata, location, or user / session identifier.
Ask processing. Your question is sent to the server and processed by the configured Gemini and Supabase services to retrieve evidence and generate the response. The application does not write the question, answer, retrieved text, or conversation to server-side analytics or application storage. The temporary same-tab history described above remains only in browser sessionStorage.
Security verification
Cloudflare Turnstile protects /ask from abuse. It processes the request IP address, TLS fingerprint, user-agent, sitekey and origin, plus technical and browser signals through Cloudflare. This necessary security check is independent of optional Analytics consent and does not use Ask question or answer content.
Legal basis & retention
Consent is the basis for optional Vercel Web Analytics. Turnstile relies on legitimate interests and necessary service security. Ask sessionStorage is functionally necessary for temporary tab-local history and is independent of consent. The consent cookie lasts up to one year. Aggregate operating records contain no conversation content or stable visitor identifier.
Your choices
The banner offers Customize, Allow essentials, and Accept all. Customize shows purpose controls: essentials are always on, while the optional checkbox directly controls Vercel Web Analytics. Clear this site's cookies in your browser to make the notice reappear. For a privacy question, contact Samuel via GitHub.