Privacy Policy · AI Policy Desk

What we collect

AI Policy Desk does not require any sign-up or account to access content. All templates, guides, and tools are free to use without providing personal information.

We may collect the following in the course of operating the site:

Server logs — standard logs including IP addresses, browser type, and pages visited. Used only for security and basic traffic analysis. Not linked to individuals and not retained beyond 30 days.
Google Analytics — we load Google Analytics in Consent Mode, set by region (Google's tag works out your location; we don't). In the European Economic Area, the UK and Switzerland it is opt-in: everything starts denied, no analytics cookie is set until you click Accept in the cookie banner, and until then Google receives only cookieless pings (page visited, browser type, no identifier) that it uses for aggregate counts. Everywhere else it is opt-out: Google Analytics sets its cookies on your first visit and you can click Decline in the banner (or use the button in the Cookies section) to switch it off. If your browser sends Global Privacy Control we treat it as Decline wherever you are. Advertising storage, ad user data and ad personalisation stay denied for everyone and Google signals are off. We do not run ads.
Page view counts (no cookies) — to see which pages help readers, each page sends us one small note when you leave it: the page address (without anything after a ? or #), how long the tab was in view (up to 30 minutes), how far down the page you scrolled (in steps of 0, 25, 50, 75, 90 or 100%), whether the screen is phone-sized or larger, the kind of site that sent you (a search engine, a social site, an AI assistant, another AI Policy Desk page, none, or other; never the address of that site) and how many links to other AI Policy Desk pages you clicked. If you come back to the tab and leave again, the note is updated instead of counted twice. We add the notes into daily totals per page (for example, 40 views of a guide on one day, 20 of them scrolled past the middle) and keep only those totals. We do not store your IP address, your browser details, a cookie or any ID, so the totals cannot be linked to you or to your other visits. Your browser type is checked only to skip search engine robots and is not saved. Because nothing is stored on your device, this counting runs for every visitor, including if you decline cookies.
Comments and newsletter sign-ups. Blog posts have a comment box and a sign-up form, and the footer has a sign-up form. What they keep is described under Comments and Newsletter below.
Contact emails — if you contact us at [email protected], we receive your email address and message content. Used only to respond to your query.

Comments

Commenting on a blog post is optional and needs no account.

We store the name and text you type, the post you commented on and the time. You may add an email address. It is optional, it is never shown on the site, and only the person reviewing comments sees it.
To fight spam we also keep a hashed form of your IP address, your browser's user-agent string and how long the form took to fill in. We delete these, and the email address, 30 days after you send the comment.
We read every comment before it appears. Advertising and link drops are deleted. Links in a published comment are marked rel="ugc nofollow".
Approved comments stay up until we remove them. Rejected comments are deleted after 90 days, and comments still waiting for review after 60 days. To have one of your comments removed, email [email protected] with the post and the text.

The spam check is Cloudflare Turnstile. Its script loads only when you click into the comment box or a sign-up form, and Cloudflare sees your IP address and browser details when it runs.

Newsletter

The newsletter is opt-in. When you enter your email in a sign-up form we send one confirmation email, and we send nothing else until you click the link in it.

We store your email address, your name if you give one, and the time and IP address of your confirmation as proof that you agreed. We use them only to send this newsletter, at most once a week.
Every email has a one-click unsubscribe link. After you unsubscribe, your address stays on the list marked as unsubscribed so we do not email you again by mistake. Ask us and we will delete it.
The list sits on our own mail server. The emails carry no tracking pixels, and we do not track who opens or clicks.

Sign-up uses the same Cloudflare Turnstile check as comments.

Purchases

Template purchases are processed by Gumroad. Payment details and personal information entered at checkout are handled by Gumroad under their privacy policy. We receive only a purchase confirmation and delivery email address.

Cookies

We do not use cookies for advertising. In the EEA, the UK and Switzerland, analytics cookies are set only if you click Accept in the cookie banner; elsewhere Google Analytics sets them on your first visit until you click Decline or your browser sends Global Privacy Control. Your choice is stored in your browser's local storage; the site does not look up your country. Your browser may store temporary session data to support basic site functionality. The page view counts above use no cookie.

Data sharing

We do not sell, rent, or share personal data with third parties for marketing purposes.

Your rights

Under GDPR and similar laws, you have the right to access, correct, or request deletion of any personal data we hold. To exercise these rights, email us at [email protected].

Changes to this policy

We may update this policy when our practices change. The date at the top of this page reflects when it was last revised.