Privacy

Last updated: April 2026

This is my personal website. I write a weekly newsletter, post videos, and recently added an AI chatbot. Here's what happens with your data when you visit.

The Short Version

I don't sell your data. Ever.
Newsletter emails are stored by Ghost and delivered via Mailgun. Ghost tracks open rates and link clicks. You can unsubscribe anytime.
The AI chatbot (Ask JAWS) processes your messages through Anthropic's Claude API. Conversations aren't tied to your identity and expire after 24 hours.
Boss Rush (boss-rush.christophermoravec.com) is an AI security game. Your messages are processed through the same Claude API. Game sessions last 2 hours. Leaderboard entries use whatever name you pick, no real name or account required.
I use Plausible Analytics for website traffic -- no cookies, no personal tracking.
Ghost sets functional cookies for the site to work. Cloudflare Turnstile (bot protection on the chatbot) may set its own cookies.

When you subscribe to Almost Entirely Human, I collect your email address and (optionally) your name. That's it.

Ghost (ghost.org) hosts the site and manages subscriptions. Ghost stores your email, name, subscription status, and signup date. Their privacy policy: https://ghost.org/privacy/
Mailgun handles email delivery. They process your email address to send newsletters. Their privacy policy: https://www.mailgun.com/legal/privacy-policy/
Email analytics: Ghost tracks whether you opened a newsletter and which links you clicked. I can see aggregate open rates and click rates, and Ghost shows me which links got the most engagement. Each email also includes a "More like this / Less like this" feedback option.
What I use this for: Honestly, I mostly just check whether anyone opened the thing. I don't build profiles or segment my audience based on individual behavior.
You can unsubscribe from any email using the link at the bottom, or email me at privacy@christophermoravec.com and I'll remove you.

AI Chatbot (Ask JAWS)

The "Ask JAWS" widget lets you chat with an AI that knows about my writing and projects. Here's what happens when you use it:

Your messages are sent to a Cloudflare Worker, which forwards them to Anthropic's Claude API for processing. Anthropic's usage policy: https://www.anthropic.com/legal/privacy
Conversation history is stored temporarily (up to 24 hours) in Cloudflare's infrastructure to maintain context within a session. After that, it's gone.
No account required. Sessions use a random ID stored in your browser's localStorage -- not a cookie, not tied to your identity.
IP addresses are hashed (one-way, irreversible) for rate limiting. I can't see or reconstruct your actual IP.
Cloudflare Turnstile (invisible bot protection) may set its own cookies. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
I don't use your conversations to train AI models. Anthropic's data retention policies apply to API usage -- as of this writing, they don't train on API inputs. Check their policy for current terms.

The chatbot only knows about content I've published publicly (newsletter posts, YouTube videos, GitHub repos). It can't access your personal information and isn't designed to collect any.

Boss Rush Game

Boss Rush is an interactive game where you try to break AI guardrails. It runs on similar infrastructure to Ask JAWS:

Your messages are sent to a Cloudflare Worker, which forwards them to Anthropic's Claude API for processing. Same API, same privacy policy.
Game sessions are stored in Cloudflare KV for up to 2 hours, then automatically deleted. Sessions include your messages and the AI's responses — nothing else.
The leaderboard stores a player name you choose and your score. You can use any name you want — there's no account, no signup, no identity verification. Leaderboard data is stored in Cloudflare KV.
Cloudflare Turnstile (invisible bot protection) may set cookies, same as Ask JAWS. Cloudflare's privacy policy.
Rate limiting uses your IP address (20 requests per minute). IPs are not stored or logged.
No account required. No cookies beyond Turnstile. No analytics beyond what Cloudflare provides by default on Workers.

Analytics

I use two analytics tools:

Plausible Analytics (plausible.io) -- a privacy-focused, cookie-free analytics tool. It tells me how many people visit and which pages are popular. It doesn't track you individually, doesn't use cookies, and doesn't collect personal data. Their policy: https://plausible.io/data-policy
Ghost's built-in analytics -- Ghost tracks page views, member signups, and newsletter engagement (opens, clicks, feedback). Ghost may collect your browser type, device type, time zone, country, and city. Ghost's servers are in Amsterdam, Netherlands.

Cookies

Ghost sets functional cookies needed for the site to work (session management, login state if you're a member).
Cloudflare Turnstile (invisible bot protection on the chatbot) may set cookies for verification. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
Plausible does not set any cookies.
I don't use any advertising or marketing cookies.

Website Hosting

The site is hosted on Ghost(Pro) with servers in Amsterdam, Netherlands. Standard web server logs (IP addresses, browser type, pages visited) may be retained temporarily by Ghost's infrastructure. I don't actively review these.

Your Rights

Unsubscribe from the newsletter anytime (link in every email, or just ask me)
Request deletion of your subscriber data by emailing me
The chatbot doesn't store anything tied to you beyond the 24-hour session window

If you're in the EU/UK, you have additional rights under GDPR, including access, rectification, and erasure. I'm a one-person operation, so just email me, and I'll sort it out.

Contact

Questions about any of this? Email me at privacy@christophermoravec.com

Changes

If I make significant changes to this policy, I'll mention it in the newsletter. This page will always have the current version.