This site collects nothing until you say yes.
No accounts, no forms, no trackers, and self-hosted fonts. Nothing is set and nothing is sent to a third party unless you press Accept on the analytics banner — decline, and this page describes a site that collects nothing at all. This page explains exactly what Accept turns on, the one other exception (the Eval Bench relay), and your rights. The site is operated by Ousios LLC, the data controller (company details on the Ousios legal notice).
Last updated 12 July 2026 · Contact: kira@kirahancock.com
What the site doesn't do
Before you answer the banner, and forever after if you decline: no cookies are set, no advertising or social scripts load, and nothing is sent to Google. Vercel Web Analytics still runs for everyone — it is cookieless and aggregate, counting page views without identifying you or following you anywhere, which is why it needs no consent. There is no visitor database, and the server functions write nothing to storage or logs. If you just read pages here, there is no personal data of yours for us to hold, hand over, or lose.
What changes if you press Accept
Google Analytics 4 loads and sets two first-party cookies (_ga, _ga_<id>, up to 2 years) holding a random identifier for your browser. Google, in the USA, receives your IP address and which pages you view. That is the whole of it: Google Signals, ad personalisation, and every advertising use are switched off, so it counts visits and nothing else. Legal basis is your consent (Art. 6(1)(a)), and you can take it back at any time from analytics settings, which deletes the cookies. Google acts as our processor under the Google Ads Data Processing Terms, with transfers covered by the EU–US Data Privacy Framework and standard contractual clauses.
The one exception: Eval Bench
The Eval Bench tool can run live AI calls. Two modes, two very different data paths:
Free runs (our relay)
The prompt text you submit is sent to our server, which forwards it to Anthropic (the AI provider) and returns the answer. Nothing is stored or logged — not the prompt, not the answer. To prevent abuse, the server counts requests per IP address in short-lived memory only (a daily rate limit); the count evaporates when the server instance recycles and is never written anywhere. Legal bases: providing the run you requested (Art. 6(1)(b) GDPR) and our legitimate interest in abuse prevention (Art. 6(1)(f)).
Bring-your-own-key runs
Your browser calls Anthropic directly — the traffic never touches our server. Your API key is saved only in your own browser's localStorage, where you can clear it any time.
On your device only
Eval Bench keeps its working state — drafts, run history, your saved key, the daily free-run counter — in your browser's localStorage, at your request, on your device. Nothing in localStorage is transmitted to us.
Email, processors & transfers
Email: the contact links here are plain mailto: links. If you write, your address and message are processed to reply, kept as long as the correspondence needs, then deleted in periodic inbox reviews.
Processors: two companies process data for us, both in the USA under data-processing agreements with EU-approved safeguards (EU–US Data Privacy Framework and/or standard contractual clauses): Vercel (hosting — sees traffic IPs as any host does) and Anthropic (receives Eval Bench relay prompts, as above). No one else receives anything, and nothing is ever sold.
Your rights
Under the GDPR and equivalent laws you can request access, correction, deletion, restriction, portability, or object to processing — email kira@kirahancock.com and you'll have an answer within one month. To protect your data from impostors, we act on requests sent from — or confirmed by — the email address the data concerns; where that's impossible, we'll agree a simple alternative proof with you. For most visitors the honest answer will be that there is nothing on file beyond any email you've sent. You can also complain to your local data-protection supervisory authority. This site isn't directed at children under 16.
US state privacy laws: Ousios LLC is currently below the applicability thresholds of the CCPA/CPRA, the Colorado Privacy Act, and similar state laws. The rights above are honored for everyone regardless, and nothing is sold or shared in any state's sense of those words.
When this policy changes, the date at the top changes with it. The current version always lives at kirahancock.com/privacy — and every prior version is preserved in the site's version history, available on request at kira@kirahancock.com.