What we collect
- Email address — only if you sign in. Used to authenticate you (magic-link), to deliver receipts, and for occasional service announcements (no marketing email without opt-in).
- An anonymous browser ID stored in a first-party cookie (
aib_uid) — used to attribute the daily free-prediction quota to your browser. Clearing cookies resets it. - Usage counters — a per-day count of metered requests per user, so we can enforce the free tier.
- Billing data — handled by Stripe. We never see or store your card number; we only store the Stripe customer/subscription reference.
- Server logs — standard request logs (IP, user-agent, path, status), kept up to 30 days for abuse and reliability.
What we don't do
- No third-party analytics or advertising trackers.
- No selling or sharing of personal data with marketers.
- No profiling for targeted ads.
Cookies
aib_uid— anonymous browser ID for free-tier quota (1 year).aib_sess— signed session cookie when you sign in (30 days).aib_lang/localStorage— your selected interface language.
All cookies are first-party, HttpOnly where applicable, and set with SameSite=Lax. They are strictly necessary for the Service to function — no consent banner is required under GDPR for these.
Subprocessors
- Cloudflare — hosting, edge compute, D1 database, KV cache.
- Stripe — payment processing.
- Resend — transactional email (sign-in links, receipts).
Your rights (GDPR / similar)
You can request access to, correction of, or deletion of your account and associated data at any time by emailing [email protected]. Account deletion removes your email and Stripe reference; usage counters older than the current day are aggregated and not personally identifiable.
Data location
Cloudflare may process and cache data globally. Stripe processes payment data in their regional infrastructure (US/EU depending on your country). Resend processes email in the EU.