Privacy & data

The short version

You can explore the whole map without an account and without giving us anything. We measure traffic to understand how people find and use the site — in aggregate, not to identify you. We never store your IP address, we don’t run ads, and we don’t track you across other websites.

What we store

• If you make an account — your email, your @nickname, and the profile and privacy settings you choose. Friends, bookmarks and saved answers are saved to your account so they follow you between devices. So is, while you leave it on, a short record of your exploring: which objects you open and what you ask the guide, counted by the day, never a log — all of it shown in Account ▸ Universe, where one tap forgets it. This lives in Supabase, protected by row-level security, and you can delete it by deleting your account.
• AI questions — the questions asked of the guide are logged (with a one-way hashed marker, never a raw IP) so we can measure cost, improve answers, and stop abuse. Don’t type anything private into it. With each question the guide is also told what is on your screen — the object and card tab you have open, a comparison or panel in front of you, how close the camera is and the names labelled on the map — so that “this” and “that one” mean what you see. That goes with your question to Anthropic’s Claude, the AI model the guide uses, for that one answer, and is never logged or kept.
• Spoken questions, if you ask by voice — your recording is sent, encrypted, to our own speech server, turned into text there and deleted at once: it is never written to disk, never logged, never kept and never used to train anything, and no one else receives it. Before the text reaches your question box, it is checked for misheard words: the text, the language of the page and the names of the objects labelled on your map go to our server and to Anthropic’s Claude, the AI model the guide uses, which sends back the corrected text. This happens before you send anything, and we keep none of it — only the cost of the check is logged. The text then comes back into your question box for you to check (Undo puts back what was heard) before you send it; from then on it is a question like any typed one (see AI questions above), marked only as spoken or typed. The speech model is NVIDIA’s open Parakeet TDT 0.6B v3 (CC BY 4.0), running on our server. Accounts for children have no voice questions.
• Messages, if you send them — the text you write to a friend, the objects you share, and who sent what and when. They stay while the conversation does. Everyone in a conversation can read it, and so can we — see below.
• Your location — only when you ask to see the sky — an observing question (“what can I see tonight”, “when does Saturn rise”) needs to know roughly where you are. Only then, and only if you share it, your location is used — coarsened to city level (about 11 km), used to work out that one answer, and then discarded. It is never written into our logs and never stored on our servers — not even as a hash. It stays in your browser so you don’t have to re-share it, and clearing your browser storage removes it. If you don’t share it, the guide simply asks — it never guesses a location.
• Analytics — anonymous, aggregate usage data (see below).

Kept in your browser

This is everything clAIp keeps on your device. Clearing your browser storage removes all of it — and signs you out, if you have an account.

• An anonymous browser marker — a random token stored in your browser (not linked to any identity) so the free AI guide can count questions per browser and stop a script from flooding it. Clearing your browser storage removes it.
• Your settings — the look, orbit paths and their colours, zoom sensitivity, language, “Always open card”, Visual or Realism, and the currency prices are shown in. If you’re signed in, the language, “Always open card” and the currency are also saved to your account so they follow you.
• A language cookie (“lang”, kept for 12 months) — the one cookie clAIp sets itself. It records the language of the pages you use, so the front page opens in it.
• Your location, if you shared it — rounded to about 11 km, with the place name shown beside it, and a note that you’ve been asked, so the question isn’t repeated.
• Your recent searches — the last 5 objects you opened from search, shown under “Recent” the next time you open it.
• What you’ve already seen — that you finished or skipped the tour, and the last day you saw the Today panel and the daily fact, so nothing is pointed out to you twice.
• Whether you’ve answered the sign-in invitation — a single yes/no flag stored in your browser, so the invitation to make an account isn’t shown again once you’ve dismissed it. It holds nothing else and is never sent to us. Clearing your browser storage removes it.
• A voice preview flag — if you opened the site with a voice-preview link, a single yes/no (“claip_voice_preview”) that keeps spoken questions switched on in this browser while they are being tried out. It holds nothing else.
• Your sign-in, if you have an account — cookies set by Supabase, our account provider, that keep you signed in. Signing out removes them.
• Bookmarks from before accounts — if you bookmarked objects on this device before July 2026, that old list is read once, when you first sign in, to add them to your account, and a note records which were added so a bookmark you remove isn’t brought back.
• For this tab only — that you’ve seen the opening animation, whether you reached an organisation’s page from the Organizations list, and a language preview opened from a link. They go when you close the tab.
• Analytics cookies — see “Analytics, specifically” below.

Messages between people

A message can be read by the people in that conversation, and by us, because the rows sit in a database we run. There is no screen in clAIp that shows us a conversation, we do not read them as a matter of course, and we never use them for anything but showing them to the people in them — but we could read one, so we would rather say so than leave you with a different impression. Don't put anything in a message you would mind us being able to see.

• Deleting a message removes the text at once — the row is emptied in the same instant, not marked for later. An empty gap stays so the conversation keeps its shape, and that goes within 30 days. Our database provider keeps its own backups for up to 7 days, so a copy can survive there that long after you delete something.
• Reporting a message copies it as it stands, so deleting it afterwards does not erase it. A report is kept for up to 12 months after we have dealt with it. If a message is deleted before you can report it, you can report the person instead.
• Blocking someone hides the conversation both ways, stops either of you sending, and ends the friendship. Only you can see who you have blocked.
• Your date of birth is stored because messages are for accounts aged 13 and over. We keep the date rather than an age, because a birthday passes; it is never shown to anyone, it cannot be changed once given, and it is deleted with your account.
• If you delete your account, the messages you sent stay in your friends' conversations with your name removed, so their side of a dialogue survives. You can tick a box as you delete to empty those messages too.

Children

clAIp accounts are for ages 13 and over. If a date of birth works out under 13, registration is refused and nothing from the attempt is kept — not the email, not the name, not the date. It is discarded on the device before anything is sent to us. A way for a parent to create access for their child, from the parent's own confirmed account, is being designed.

An account under 13, or one that has not given a date of birth, has no messaging at all: no conversations, no sending an object to a friend, no public rooms. Those parts are not switched off for it — they are not there.

Backups

Your account, profile, friends and the guide's question log are copied once a day into an encrypted backup held outside our database provider, and each copy is deleted after 30 days. It exists so that losing one supplier does not lose your account.

Messages are deliberately not in that copy. They live only in our database — which means a conversation could not be recovered if we lost it, and also means no copy of your messages sits anywhere else.

Analytics, specifically

We use two privacy-respecting analytics tools: Vercel Web Analytics and Google Analytics 4. They tell us things like how many people visit, which countries and devices they use, where they arrived from (the referring site or search engine), which pages and objects they open, and roughly how long they stay. It’s about the audience in aggregate — not about following a named person.

To keep it honest, Google Analytics here is configured to:

• never store your IP address — Google truncates it and we ask for IP anonymisation on top;
• run no advertising features — no Google Signals, no ad-personalisation, no cross-site or cross-device ad tracking;
• honour Do Not Track and Global Privacy Control — if your browser sends either signal, clAIp loads no analytics for you at all: no script, no cookie, nothing.

Analytics that aren’t suppressed by that signal set a small first-party cookie so a visit can be counted as one session rather than many. You can opt out at any time by turning on Do Not Track, using Google’s opt-out add-on, or blocking analytics with your browser or an extension — the map works exactly the same either way.

What we don’t do

• We don’t sell or share your data with data brokers or advertisers.
• We don’t store raw IP addresses anywhere.
• We don’t track you across other websites or build an ad profile.
• We don’t need an account for you to use the map, cards, search or time slider.

Your choices

Turn on Do Not Track / Global Privacy Control to switch analytics off entirely. Clear your browser storage to remove everything under “Kept in your browser”. If you have an account, you can switch off or forget your exploring record in Privacy, and you can delete the account — which removes your profile, friends, bookmarks and that record.