Privacy

Anonymous analytics, on by default. In the EU, the EEA, the UK and Switzerland it starts off, and we ask first. An agent that remembers your questions for as long as the tab is open, answered by our own servers, with a model on Cloudflare as the backup. Nothing you type is kept by us unless you turn that on yourself. No accounts, no profiles, no cross-site tracking, and nothing sold on.

These take effect immediately and are remembered on this device. Turn all three off and the site keeps working. That is the test we hold them to.

Analytics

Which pages and sections get read, roughly how long for, and country-level location. PostHog and Google Analytics, both behind the first switch above. Turn it off and neither one loads at all.

What you type

Messages to the agent, and anything you put in a contact form. Contact details you send are used to reply to you.

Technical

Your IP address and basic browser information, seen by our host in the course of serving the page and used to rate-limit and block abuse.

Your choices

The three switches above are stored in this browser so we do not have to ask again on every visit. In the EU, the EEA, the UK and Switzerland a small cookie also records that analytics must wait for your yes. It holds only that, never your country, and our host works it out from your IP address as it serves the page.

Shared looks

If you open the background editor and choose to share a look with us, we receive only its settings: which effect, and the position of each slider. Nothing about you goes with it. Sending it runs a Cloudflare Turnstile check, which only loads when you tick the share box, to keep out automated spam. We store each look on Cloudflare, and it appears publicly only if we approve it. Approved looks are loaded from the same Cloudflare service when you open the editor.

The chat is an AI agent, not a person. It is worth its own section because it is the part of this site that sees what you write.

Where it runs

The chat runs on Vercel, which hosts this site. Our own servers answer, running an open model we host ourselves, and your messages reach them over Cloudflare’s network. If they are busy or down, a model on Cloudflare answers instead and receives the conversation. Cloudflare also turns each question into numbers so we can look up our own writing. Those are the only places your messages go.

What it remembers

With the second switch on, it carries your earlier questions between sections so a conversation continues instead of restarting, and the questions you tap decide which suggested questions come first. That memory lives in the browser tab and is gone when you close it.

How it performed

With the first switch on, we record the shape of a conversation and nothing of its content: which suggested question was tapped, how many turns it ran, how long the answer took to arrive, and how much of the model it used. We keep that to find out which questions are worth offering and when the agent is being slow.

Transcripts

The third switch sends conversations back to us so the answers improve. It is the only one that transmits something you wrote, which is why it is the only one that is off until you turn it on.

What not to send it

It is a public enquiry channel. Please keep credentials, confidential material, and other people’s personal data out of it.

• Sell your data, or share it for anyone else’s advertising.
• Follow you around other websites.
• Build a profile of you, or ask you to make an account.
• Email you because you visited. We write back; we do not write first.
• Treat turning everything off as a reason to degrade the site.

Analytics

Held by PostHog on US infrastructure, and by Google Analytics under its own retention limits. Kept for up to 24 months.

Chat conversations

Not stored by us unless you turn transcripts on. To answer faster, the server keeps recent answers in memory for a short while, so the same question gets the same reply. Nothing is written to disk or logged.

Messages

Enquiries reach us by email and are kept as long as we need them to answer you and to keep a record of having done so.

Shared looks

Kept on Cloudflare for as long as the gallery exists. A look holds no personal data, so it cannot be traced back to you.

In your browser

Your switch settings stay on this device until you change them, and so do any background editor settings and presets you make. In-tab chat memory is discarded the moment the tab closes. The editor’s Forget everything button removes its settings.

See it

Ask what we hold about you and we will tell you.

Delete it

Ask us to remove it. Analytics already aggregated into counts cannot be picked back apart, and we will say so rather than pretend otherwise.

Withdraw

Change your mind about any of the three switches, at any time, from this page or from the privacy control under any chat on the site.

Ask

About any of this, including how a decision was reached. Section 10.

Some of this site is experimental, and we would rather say so than have you find out. We run simulated visitors against it to find rough edges, which collects nothing about anybody real, and we ask people we know for honest reactions. Neither adds anything to what is described above.

If this policy changes in a way that matters, the date at the top moves and the change stands on its own. We will not quietly widen what we collect and leave the date alone.

Write to privacy@vummo.com, ask the agent to pass a message on, or use the form below. It reaches the people who run Vummo, LLC, not a ticket queue. The terms cover the rest.