Summary

This page explains what Omar Wade collects when you read this site, why, and what choices you have.

What we collect

• Page analytics. We count article views to understand what is read. This is aggregate; we do not build advertising profiles from it.
• Account data. If you create an account we store the email address and profile details you give us, in order to operate the service.
• Server logs. Standard web-server records, including IP address, retained for security and abuse prevention.

Cookies and advertising

This site uses cookies to keep you signed in and to remember display preferences such as light or dark mode.

Third-party advertising. We may serve advertising through Google AdSense and other partners. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and/or other sites.

• You may opt out of personalised advertising by visiting Google Ads Settings.
• You may opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info.
• More detail is in Google's advertising privacy notice.

Your choices

You may block or delete cookies in your browser; parts of the site that depend on being signed in will stop working. You may ask us to delete your account and the data attached to it.

Contact

Questions about this policy, or a request about your data, go to the contact below.

Who we share data with

We do not sell personal data.

If you are reading this site. What you read here goes to the providers we engage to run and fund it, and nowhere else. AI providers are not among them: reading an article sends nothing to a model.

• Google AdSense - Advertising on public articles. Reader IP address, cookie identifiers, page context. Located in United States. Loaded ONLY after the reader consents to the advertising category (core.consent).
• Email delivery (SMTP provider) - Transactional email. Recipient address and message body. Located in the configured provider's region.

If you hold an account. The AI providers this platform talks to are the ones YOU choose. You supply your own API key, the request is billed to your account, and your contract for that processing is with the provider directly - we are not a party to it. When you run a harness, a persona or a routine, the prompt you wrote and the content it works on are transmitted to that provider so it can answer.

Practically, that means we cannot list your AI providers exhaustively, because you pick them. The platform ships integrations for the services below, and also accepts any OpenAI-compatible endpoint you point it at - including a provider we have never heard of, or a model running on your own hardware. What reaches any of them is what you send.

• Anthropic - AI model provider. Prompt content, which may contain whatever the customer puts in it. Located in United States. Your key, your account, your contract with them.
• fal.ai - Image generation for storyboards. Scene descriptions written by the customer or their personas. Located in United States. Your key, your account, your contract with them.
• Higgsfield - Image generation (alternative provider). Scene descriptions. Located in United States. Your key, your account, your contract with them.
• RapidAPI - Market and property data lookups. Search parameters; no subject data unless a customer types it. Located in United States. Your key, your account, your contract with them.

Two things follow from that arrangement, and both are in your favour: what a provider may do with your prompts is governed by the terms YOU accepted with them, not by ours; and if you remove a key, the platform stops being able to reach that provider at all.

Organizations without their own key cannot use the features that need one - we do not quietly fall back to a platform account, because that would send your content under somebody else's terms.

If you unlock a creator's work with a membership. Some organisations publishing here put part of their work behind their own membership, and let you sign in with the service that membership runs on. That service belongs to the CREATOR, not to us: you are approving their app, on their account, and what we receive is only enough to know whether to open the content you paid them for.

• Patreon - Membership identity and pledge status for creator paywalls. For a reader who signs in with Patreon: their Patreon account id, name, email address, and whether their pledge to that creator is live and at what tier. Nothing about what they read here is sent back to Patreon. Located in United States. The creator's app, on their account.

Signing in this way creates a reading account here, held to the pages you paid for. You can delete it at any time, and revoking the membership at its own provider closes the access on its own.

How long we keep things

• SystemLog - 365 days. A record of significant actions taken in the platform, so questions about what happened can be answered.
• Notification - 180 days. In-app notices. Unread after six months means it was never going to be read.
• PageView - 90 days. Article analytics. Aggregates outlive the rows; the per-view record with its visitor identifiers does not need to.
• LoginAttempt - 90 days. Sign-in attempts, so we can spot someone trying to break into your account.
• LoginHistory - 180 days. Shown to the user as their own session history. Half a year is long enough to spot an intrusion they missed.
• NoticeDismissal - 365 days. Only exists to stop re-showing a banner; the banner itself expires.
• IPBlacklist - 365 days. Addresses blocked automatically for repeated failed sign-ins. Blocks placed deliberately by an administrator are kept until lifted.
• Inquiry - 730 days. Contact-form submissions: a name, an email and free text from a member of the public. Two years covers a sales conversation that goes quiet and restarts; past that we are holding a stranger's message for no reason we could defend.

Everything else - the content you create - is kept while your account exists and removed when you delete it. You can download a copy of everything we hold, or delete your account, from Account → Privacy & data.