What I keep, and why.

When you type a question into the conversation on the home page, I keep a record of it: what you asked, the answer it gave, when, the country the request came from, a random ID for that visit so I can read a conversation in order, and, if you keep going past your first question, the name and email you give me. I read these myself, to learn what people want to know and to make the site better.

Your first question is anonymous. To keep going after it, I ask for your name and email, and send a one-time code to that email to confirm it’s yours. I keep your name and email with that conversation so I know who I was talking with, and can write back if it’s useful. I don’t add you to a mailing list, and I don’t share them. I never record your IP address, and the site sets no cookies. I will read what you type, so please don’t share anything private or sensitive.

Each record is deleted automatically after 12 months, and is kept confidential. The suggested questions under “How can I help you?” are answered on the page itself; clicking one sends nothing and isn’t recorded.

Your name, email, topic and message are emailed to me so I can reply. The site doesn’t store them; they live in my email like any other message, for as long as our conversation is useful, and you can ask me to delete them.

To keep out spam, the form uses Cloudflare Turnstile, which checks that a person is sending it.

• Cloudflare hosts the site, protects it from abuse, stores the conversation record, and delivers contact-form emails and the conversation’s one-time codes. Like any web host, it sees your IP address to serve the site, and keeps short technical logs for a few days. To limit how many questions or messages one visitor can send, the site keeps short-lived counts under a one-way scramble of the IP address, never the address itself; they’re deleted within a day. Cloudflare’s privacy policy.
• Anthropic provides the AI that writes the answers. Your question, and the last few exchanges of the conversation, are sent to Anthropic to write the reply. Anthropic’s privacy policy.
• Google hosts my email, so contact-form messages are stored there.

Each of them processes this data for me, under its data processing terms, and not for its own purposes. All three are in the United States, so your data may be processed there; those transfers rely on the EU–U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.

There are no analytics, ads or tracking, and no automated decisions are made about you. Your browser keeps a few small notes, for this tab only and gone when you close it: one for a few seconds between pages, so the birds can follow you from page to page; once you’ve given your name and email, a pass for the conversation, so you’re not asked again; and whether you’ve reached today’s limit. The pass goes back to the site with each question; nothing else leaves your browser.

I’m responsible for this data: David Issa, reachable through the contact form (choose “Privacy request”). I’ll answer within a month.

You can ask me for a copy of what I have from you, ask me to correct it or delete it, ask me to limit how I use it, or object to my keeping it. Because the conversation record doesn’t say who you are, tell me roughly when you visited and what you asked, and I’ll find it. Using these rights costs nothing, and won’t change how the site treats you.

If your browser sends a Global Privacy Control signal, I don’t record your conversation at all.

Why I may keep it. The conversation record, the name and email I ask for after the first question, and the anti-abuse counts rest on my legitimate interests in understanding who asks what, keeping the conversation from being abused, and keeping its costs in check; contact-form messages, on answering you. You never have to give me anything: the site works without the form, and your first question needs no name. Past it, the conversation needs your name and email; if you’d rather not, the contact form or LinkedIn reach me too.

In the EU or the UK, you can also complain to your data protection authority.

In California, in the past 12 months I’ve collected the categories above: identifiers (your name and email, in the conversation after the first question and in the contact form), what you type, and your approximate location (country). I use them only for the purposes on this page, keep them as long as it says, and I don’t sell or share personal information or use it for advertising. You have the rights to know, delete and correct it, and not to be treated differently for using them.

This site isn’t meant for children under 16.

The conversation is an AI that answers in my voice from what I’ve written. I don’t read along as it answers, and it can be wrong. Its answers aren’t legal, medical, financial or other professional advice, and they aren’t an offer, a promise or a commitment from me or from XenLogic. To work together, start with XenLogic.

Please use it as it’s meant to be used: questions for me, not attempts to break it or to make it say something it shouldn’t. It has limits on how much each visitor can ask.

The writing and design on this site are mine, © 2026 David Issa, unless they say otherwise. If this page changes, the date at the top will too.