Privacy notice

Short version: we keep as little as we can, and you can take it or delete it at any time.

This is a plain-language summary for a prototype. Before launch, have it reviewed for the countries your visitors live in.

Version 2026-11-06. Operator: Neucluse LLC. Questions or requests: [email protected].

Who receives what you type to generate a page

This site is running in demo mode: no prompt is sent to an outside AI company.

Age

You must be 13 or older to create an account, or have a parent or guardian's permission. Learners who join a class through a teacher are covered by the class consent shown when they join.

If you do not create an account

• Your progress, reflections and prompts stay in your browser. We do not receive them.
• What you type to generate a page is sent to the AI companies listed above to build it. We do not store the prompt or the page.

If you create an account

• Account: your name, email and a salted hash of your password (we never store the password itself).
• Progress: the same progress your browser holds, saved so it follows you between devices.
• Sign-in sessions: a random token in a cookie that is required for you to stay signed in. We store only a hash of it, plus the browser name and the last-seen time.
• Email: we use your address to confirm it, to send a password reset link when you ask for one, and to tell you when your password changes. We do not send marketing email. The link tokens are stored only as hashes and expire within 24 hours.
• Security log: sign-ins, failed attempts, password changes and admin actions, with a salted hash of your IP address instead of the address. Kept for 365 days.

Usage statistics (everyone)

• We count page views, which module was used, whether a generated page was blocked by the safety scan, and whether a module was accepted. We never record prompt text or page content.
• No cookies, no third-party trackers, no advertising. IP addresses are not stored: a visitor is a hash that changes every day.
• When a page crashes, we keep the error message, a short technical trace and the page address (no query strings, no email addresses, no page content) for up to 90 days, to fix bugs. When you are signed in, we also note which of your account's actions hit an error (the same details, for 30 days) so we can help you if something breaks. Site administrators can see an activity history for each account (sign-ins, what you generated or checked and how it ended, emails sent, errors), never what you typed or built, and each time an admin opens it that is recorded.
• If your browser sends Do Not Track or Global Privacy Control, we do not count you.
• Kept for 180 days.
• Two-factor sign-in (optional; required for admins): if you turn it on we store a secret for your authenticator app and hashes of your recovery codes, and delete them when you turn it off or delete your account.
• Name and email changes: you can change them on your account page. Changing your email sends a notice to the old address and asks you to confirm the new one.
• Reports you send: if you press "Report a problem" we keep the reason and your note, with your prompt and page only if you tick the box to include them. Reports are deleted after 180 days or when you delete your account.
• AI spending: we count how many pages you generate and the estimated cost, linked to your account, to keep the service within its limits. We do not keep the prompt or the page with it.

If you publish a page

Only if the site offers it and you press Publish this page. The page and the address you chose are stored and shown to anyone with the link, on a separate domain, with a "Report this page" link; search engines are asked not to list it. You can unpublish it at any time, and deleting your account removes it. We may remove a page that breaks the terms.

If you join or run a class

• Joining: you choose to join with a code from your teacher and tick a box to agree. Your teacher then sees your name, your email, when you joined, and for the modules they assigned: whether you started or finished each one, how many tries you made, your best checks passed and when you were last active.
• Notes: a teacher can leave you a short note about a module; you see it on your account page. Notes are deleted when you leave the class.
• Never shared with a teacher: what you typed, the pages you made, your reflections and your audit trail.
• Leaving: you can leave a class at any time from Join a class. Your teacher stops seeing you straight away. Deleting your account removes you from every class.
• Teachers: we keep the class name, join code, assignments and the daily limit you set. Downloading a class list is recorded in the security log. Delete a class to remove it and its assignments.
• Classes are for adults for now. If you teach people under 18, check with us first: school use needs extra consent steps that are not built yet.

If you use "Check what you built"

• The text you paste or upload is read in memory to make the report and then dropped. We do not store it, write it to logs, or send it to an AI model.
• We never open a web address for you. The report lists file names and line numbers, and never repeats a secret it found.
• We count that a check happened, how many files, which kind of page, and how many problems were found. We do not record what the files contained.

Your choices

• See and download everything linked to your account from Your account.
• Delete your account there too. It removes your profile, sessions and saved progress. Log entries that mention you remain only as anonymous hashes until they expire.
• Sign out of other devices from the same page.

Who can see it

Site admins can see account details, the security log and aggregate statistics so they can run and protect the service. Every admin action is logged. We do not sell data.