Privacy
Version 2026-08 · updated 2026-08-15
This site is a personal experiment with an intelligence layer. It keeps less about you than the old site did — there is no analytics — but what it keeps is more personal: what you open, and what you choose to tell the guide. Nothing is stored past this tab unless you say so.
What is kept, and what it is for
| rung | what you give | where it lives | what it buys | off |
|---|---|---|---|---|
| passing through | nothing that outlives this tab — a session cookie and this tab's own state | this browser tab only | the guide, without memory of earlier visits | nothing to turn off |
| remembered here | what you open, ♥, and what you tell the guide, in your words | this browser (never a server) | picks that improve across visits; the guide can quote what you told it | /forget |
Your controls
| the right | the command | what it does |
|---|---|---|
| know what is held about you | /export | downloads everything this browser holds, as one file |
| erase it | /forget | wipes this browser's record and the visitor id |
| correct it | /learn manage | shows every answer verbatim; remove any one |
| see this session's reading | /history | what you opened this session |
| read this | /privacy | the short form, any time; the full statement is this page |
Who
This is the personal site of Ammon Haggerty. Reach me through the links on /about.
What this is, and isn’t
The old site ran Google Analytics. This one runs none: no IP logging beyond what the host keeps to serve requests, no device fingerprinting, no advertising or marketing identifiers, nothing sold or shared. What it does keep is smaller and more personal — the tables above — and it keeps nothing past your tab unless you choose the remembered here rung.
The guide is an AI. Each message you send it, together with the current page and — if you are on the remembered here rung or have answered its questions this session — the record described above, is sent to the model provider (Anthropic) to generate the reply, then discarded by me. I do not store conversations on a server. The site is hosted on Cloudflare (US); Anthropic is in the US; if you are in the EU your data therefore leaves the EU for the length of a request.
Two things outside the tables
- Contact verification. If you ask the guide for something private (a phone number) it may ask
whether I know you, and check a name plus a few digits against a one-way hash of my contacts. A
successful check sets a separate cookie (
ah_grant, 30 days) so it needn’t ask again./forgetcannot clear that one from the browser today; it expires on its own. (Making/forgetclear it too is on the list.) - This session’s mechanics. A session cookie identifies your tab to the site; the tab’s own state (what you opened, the chat you can see) lives in the tab and dies with it. The chat is rate-limited per IP address — a count against your address, kept for at most an hour, never the content.
Retention
- Browser rungs: until you
/forget, or until you clear this site’s data in your browser. A record from before this notice existed, never kept or cleared, is removed after 90 days. - There is no account rung yet. When one exists it will get its own row here, its own consent, and a stated retention period before it stores anything.
If something goes wrong
The record is in your browser, so a leak of my systems cannot expose it. If a future account rung changes that, this section will say what would be exposed, who I would tell, and how fast.
Signals I honor
- Global Privacy Control: with GPC on, you are never asked to be remembered (you can still opt in
from
/privacy). - Nothing here is directed at children.