Privacy

This site belongs to Chris Wijnia. It is built to collect as little as possible.

What this site does not do

• It runs no advertising.
• It sets no cookies of its own for visitors. (Two private pages, for me, keep a sign-in cookie.)
• It loads no third-party fonts: fonts are served from this site, and the soundtrack is generated in your browser.

Analytics

• Vercel Web Analytics counts page views without cookies: the page, where you came from, your country and device type. It builds no profile of you.
• Google Analytics sets cookies, so it is optional. In the EU and EEA, the UK and Switzerland, the site asks first and loads nothing until you allow it. Elsewhere it loads by default. To decide whether to ask, the site checks which country your request comes from; that is not stored. When it runs, it also receives which links and buttons you click and what you do in the experiments (a game started or finished, a stroke painted), and the experiments’ random device ID as its user ID, so your visits count as one person; never your name or address.
• Either way, the Analytics link at the bottom of every page changes your choice. Turning it off stops Google Analytics and removes its cookies.

A few preferences, such as where you dragged a window or which chess pieces you picked, are remembered in your own browser’s storage. They never leave your device.

Experiments hosted elsewhere

Some experiments are other sites of mine, shown in a frame. They load only when you open that experiment, and those sites have their own policies.

Messages you send

If you use the contact form, your email address and message are delivered to me through Google’s Gmail service so I can reply. A copy is also kept in the site’s database, so a message is not lost if delivery fails. I use them only for that conversation, do not share them with anyone else, and delete both when they are no longer needed. The form includes a hidden spam check, a small proof of work solved by your browser, and a short-term rate limit keyed to your IP address, which is kept in memory and not stored. Before delivery, the message is also sent to TypeSafe, whose Jev model checks whether it looks like spam; the result tags the subject line and is kept with the copy.

If you let Jev play in the chess experiment, the position and the moves so far are sent to TypeSafe (through Vercel’s AI Gateway) to choose its move. When Jev joins a drawing on the emoji canvas, the emoji you just painted and the cells around them are sent the same way. Nothing about you is sent with them. The chess coach, Stockfish, runs in your browser and sends nothing. So that Jev can be rate-limited and its costs capped, each call is logged in the site’s database with its time, cost and a visitor code: a one-way hash of your IP address and the date, which changes every day and cannot be turned back into the address. A game played to the end is kept too (its moves, how long each took, who played and the result, with the same visitor code) so it can have its own link and count on the scoreboard. On the emoji canvas, each emoji placed is kept with the cell, the time and the same visitor code, so placements can be rate-limited. The experiments give your browser a random device ID, kept in its local storage: not a fingerprint, and not derived from your address. It is stored with your placements and your finished chess games, and marked while an experiment is open, so the experiments can count unique visitors, painters and players and show how many people are there right now. On the canvas’s activity list, other people see your paint under a made-up name and colour (such as “Copper Heron”), worked out from a one-way hash of that ID: the same each visit, and it cannot be turned back into the ID.

Jevvie, and agents

Jevvie, the character in the corner, can be asked to do things and now and then offers a tip. What you type to it, with the page you are on, is sent to TypeSafe (through Vercel’s AI Gateway) so Jev can choose which of the site’s actions you mean. To decide on a tip, or to choose one when you ask, it sends the page, how long you have been idle and how far down you are. Its buttons run without asking anyone. Each call is logged like Jev’s other calls, with the same visitor code. Where you put it, whether tips are on and whether you sent it away are kept in your browser’s storage.

The same actions (open a page or a note, play a chess move, paint an emoji, play the soundtrack) are offered to AI agents running in your browser, through WebMCP. The site sends nothing for this: an agent only sees and uses them if you run one.

Server logs

Like most websites, the hosting provider may keep standard request logs (such as IP address, time and the page requested) for security and reliability.

Links

Pages link to other sites. Those sites have their own policies.

Contact

Questions about this policy: use the contact form on this site.

Effective 26 September 2026.