Privacy policy

Account preference record

Your durable preference record stores keys, values, the brief statements supporting them, whether a preference is explicit or inferred, revisions, and update times. This record is readable by the service and stored in the account database, separate from your encrypted private vault. It remains available while the website is closed.

You choose what to save. We do not automatically collect full conversations. A connected AI derives records from input you give it; these may need correction. A connection you approve can read the whole record, including future entries. With save permission it can save, correct, and delete entries immediately. It does not need a second approval on this website.

Records remain until you forget them or delete the account. Use Export to download them and Disconnect to stop future connection access. We do not put preference values or source statements in request logs or analytics. Freeform text is not automatically screened; do not store credentials, payment-card data, government identifiers, or protected health information.

Personal profile

Your About me text stays in browser storage and, if you use account sync, your encrypted vault. An approved AI connection gets only the sections you select. Edits to those sections update the shared copy. We do not add the text to public profiles, group packs, analytics, or logs.

Freeform text is not screened for sensitive facts. Review each section before sharing. The gateway can read approved remote projections when serving a connection. Revoking access cannot recall copies already received.

Who receives information

Hosting and database providers process service data to operate Fingerprint. A transactional email provider processes your email address and sign-in message to deliver account access. When a connected AI requests context, it receives the approved information returned by Fingerprint and handles it under its own data practices. ChatGPT receives that context through OpenAI.

Your encrypted vault and the separately shared copy are different: the vault remains encrypted with keys managed in your browser, while the gateway can read the approved shared copy to answer an authorized connection request. A copy already sent to an AI service cannot be recalled by revoking access.

1. Private fingerprint

Your choices and full map are saved in browser storage and in your encrypted vault. Encryption happens in your browser. Project Fingerprint does not receive your vault password or open vault key. Approved AI copies are separate from the private vault.

2. Core preference votes

When you choose between eligible items in a normal-sensitivity core domain, the service also stores the normalized pair, your preferred item or a Neither response, catalog version, event identifier, and timestamps. These votes are readable, linked to your account, and retained for the account lifetime for future aggregate analysis. Project Fingerprint does not submit ratings, confidence, patterns, manual takes, skips, notes, imports, protected-domain choices, or the encrypted fingerprint.

3. Account data

An account stores your email, Terms acceptance, session records, preference record, optional encrypted vault, wrapped vault keys, and core preference votes. Deleting only the encrypted vault does not delete the preference votes. Deleting the account does.

4. Public Network data

Your handle, profile, public posts, comments, collections, follows, and reactions are readable by the service. They are public only when you choose to publish them. Your private map stays separate.

5. Encrypted social data

Messages, private comparison packs, and group contributions are encrypted in your browser. The service stores ciphertext and delivery data. A message report includes only the messages that the reporter submits.

6. AI connections

An AI connection gets a separate approved copy of selected profile sections or taste data. The gateway can decrypt that copy to serve an authorized request. The connected AI receives the returned context and may use it in your conversation, subject to its own data practices. Revocation stops future access and clears the active shared copy and its wrapped key; it cannot recall earlier responses.

The ChatGPT preference-record connection uses the account record described above. The following projection and proposal behavior applies to the separate private-profile connections. Do not include credentials, government identifiers, payment-card data, protected health information, or full chat transcripts. Freeform text is not automatically screened.

Proposals are encrypted on the server and expire after 30 days. Their encrypted contents are cleared during subsequent proposal processing. Connection records, proposal status metadata, and audit events remain until account deletion. Audit events include the tool and client names, time, and outcome, but not the prompt or reply. Deleted data may remain in encrypted backups until those backups expire. See AI sharing and Data deletion.

7. Analytics and operations

Google Analytics runs only on public information pages and is separate from the signed-in choice feed. We also keep limited security, rate limit, delivery, and error records. We do not sell personal data or use private maps or messages to train a public model.

8. Delete data

You can delete a public item, your Network profile, an AI connection, the server vault, or the full account. See Data deletion.