Privacy Policy
What the station keeps, and what it doesn't.
The station collects the minimum it needs to do its job and nothing more. Here's what comes through the door and what happens to it.
What we collect
- Calculator answers — what you told the station during a weigh-in, stored against a random submission id.
- Transcripts pasted into What Just Happened, if you check the consent box. See the storage paths below.
- Email address, if you give one, to send your full report and to let you return to it later.
- Optional account info, if you choose to create an account to track your results over time.
What we use it for
- Generating your score and report. That's the point.
- Aggregated and anonymized benchmarking — no individual submission is exposed, and we don't link aggregated data back to identifying information.
- Sending you your full report and the occasional road advisory, if you opt in.
What Just Happened — storage paths
The paste surface has two storage paths, controlled by the consent checkbox. Either way, you get the read.
- Corpus path (consent on)— your transcript is scrubbed server-side to strip names, emails, phone numbers, URLs, account numbers, and other obvious personal identifiers before anything is written to storage. The scrubbed transcript, the extracted pattern features, and the station's read are kept against a random id. No raw transcript is retained.
- Minimal-delivery path (consent off + email)— if you want the full report but don't want the transcript kept, only the composite score, the layer scores, your email, and a link to your report are retained. The transcript itself is never written to storage. These records are automatically purged 90 days after submission.
- Ephemeral (consent off + no email)— if you neither consent to corpus inclusion nor leave an email, the station runs the read in memory, returns it to you, and keeps a lightweight record (score + status only, no transcript, no email) that also auto-purges after 90 days.
The consent box defaults to unchecked. The station does not store any transcript unless you explicitly opt in.
Rate limiting
The station keeps a salted hash of the incoming IP address on each What Just Happened submission so it can spot bursts of traffic and throttle them. The raw IP is never written to storage. Submissions above a soft limit trigger a lightweight Cloudflare Turnstile challenge; the challenge does not track you across sites.
Cookies
The station uses a small number of cookies, none of which track you across other sites.
- rs_cookie_consent — records whether you accepted or declined non-essential cookies. Expires after one year.
Google Analytics sets its own cookies for anonymized traffic measurement. These are only loaded if you accept non-essential cookies via the consent banner.
Third-party services
The station uses Supabase (database and storage), Resend (email delivery), Cloudflare Turnstile (bot-protection challenge on the paste surface, when needed), and Google Analytics (anonymized traffic measurement). Each of these processes some portion of the data listed above under their own privacy terms.
Retention
- Weigh-in submissions are retained until you ask the station to delete them.
- What Just Happened minimal-delivery and ephemeral records auto-purge 90 days after submission.
- Corpus-path What Just Happened records are retained under the same terms as weigh-in submissions.
- Email addresses remain on the list until you unsubscribe.
If you want your submission deleted, email the station and it will be.