Privacy Notice
Last updated: July 24, 2026 · Version 1.1
This notice explains what information Did you get me collects, how it is used, and what choices you have. This is an independent research project operated by an individual — not a corporation — and your data is treated accordingly.
What we collect and why
| Data | Why it's collected | How long it's kept |
|---|---|---|
| Email address | Used only to identify your account and sign you in. Never used for marketing. | Until you request deletion |
| Display name | Used to personalize the interface. Can be a pseudonym. | Until you request deletion |
| Password | Stored as a one-way cryptographic hash (bcrypt). We cannot read your password. | Until you request deletion |
| Questions you submit | Core research data used to examine the possibilities considered before an answer and the usefulness of the result. | Indefinitely for research purposes |
| Interpretation selections | Records which AI-proposed interpretation and reason you selected. | Indefinitely for research purposes |
| Evaluations you write | Your account of what you meant and how useful the answer was. Central to the research. | Indefinitely; all versions preserved |
| Daily usage counts | Enforcing per-user daily limits to control API costs. | Rolling 90 days |
What we do not collect
- We do not collect IP addresses in our database (the web server may log them briefly for security purposes)
- We do not use cookies beyond the session cookie that keeps you logged in
- We do not use analytics services, advertising networks, or tracking pixels
- We do not collect any information about you outside of what you directly provide
Third parties
OpenAI. The text of your question and the selections needed to generate an answer are sent to OpenAI's API. The application does not intentionally include your display name, email address, or password in those requests. OpenAI's Privacy Policy and API data controls govern that processing. OpenAI states that API inputs and outputs are not used to train its models by default; API data may be retained for safety monitoring or service operation under its current policies.
Hostinger. The service is hosted on Hostinger's shared hosting infrastructure. Hostinger may have access to server-level data as part of providing hosting services. Their Privacy Policy applies.
Data is not sold. Other providers may process limited technical data only when needed to secure, maintain, or deliver the service.
Your rights and choices
- Export your data. You can download all of your questions and evaluations at any time using the "Export CSV" link in the navigation.
- Request deletion. Contact us to delete your account and identifying account information. Research records may be retained only after they have been separated from your account and reasonably anonymized for research continuity.
- Use a pseudonym. Your display name does not need to be your real name.
- Correct your information. Contact us to correct your email or display name.
Security
Passwords are hashed with bcrypt and never stored in recoverable form. The configuration file containing database credentials and API keys is stored outside the publicly accessible web directory. The site uses HTTPS. Access to the research database is restricted to the site operator.
No security measure is perfect. Do not submit questions containing highly sensitive personal information.
Children
This service is not directed at children under 13. If you believe a child has created an account, please contact us for prompt removal.
Contact
For any privacy-related question or request, use the contact information provided to you when you were invited to participate in the research.