Privacy

What and why

What you type, the assistant's replies and the chat's title, so you can pick up where you left off or share one. No accounts, so no name or email.

How long

In your browser (your 30 newest). Unless you turn it off, a copy also goes to my server and is deleted 90 days after you last used the chat.

The cookie

One first-party cookie, __Host-vid, a random ID so the server can find your own chats. It belongs to ask.michaelcampanelli.com only, lasts 365 days, is only set while server saving is on, and never follows you to other sites.

Who can read it

I can. Chats on the server may be read by me to fix problems and see what people ask, so please keep anything private out of them.

Sharing

Only if you make a link. Anyone with it can read that one chat for 90 days or until you revoke it.

Exports

A portfolio or one-sheet you ask for is built and kept on my server for 90 days, whatever the chat setting is, so you can download it again. It holds the pages, the name you prepared it for and any questions you added. A job listing you paste is read to write it and is never stored. A share link lets anyone who has it open that one export for up to 90 days; Stop sharing ends it at once.

Notes to Michael

If you ask the assistant to draft a note to me and press Send, it goes to my inbox as an email from you, with the name and address you typed (I cannot verify them) and a link to this chat only if you leave that box ticked. The draft is part of the chat like any message. Nothing is sent, and no separate copy is made, until you press Send. A sent note is kept on my server for 90 days so a send cannot be lost or repeated; my inbox keeps its own copy. The email goes out through Resend, and Cloudflare Turnstile checks that you are a person.

NDA screenshots

Screenshots from work under NDA show blurred, and the blur is made on my server: the original never reaches your browser. If you ask to see them, I get an email with the name and address you typed (I cannot verify them) and your note, and choose to allow or deny. If I allow it, I email you a link that works once; it sets a cookie in that browser for 7 days and nothing else. The request is kept on my server for 90 days.

michaelcampanelli.com

A note from its contact forms is handled like a note from here. On the software page, on a wide screen with a mouse, where your pointer is and anything you say with Say hi are shared live with whoever else is on the page, through Liveblocks; your browser keeps a random ID so you keep the same name, and none of it is kept on my server. If you leave an address with Say hi, it comes to me as a note. A comment you pin is public: the name you type (if any) and the words stay on the page, and on my server, until I remove them, and I get a copy by email. Hiding other people is remembered in your browser.

Other services

A hashed copy of your IP address (never the address), your browser type and rough country are logged to stop abuse. Your messages go to an AI provider to be answered, and Spotify's own player and policy apply if you play a song.

Deleting

In Recent, delete one chat or clear them all: the device copy, the server copy and any share links go straight away. Or switch the server copy off above. The terms are short too.

Updated 15 October 2026