Privacy
This site has no accounts, no cookies and no analytics. The only processing happens when you run the live demo.
What I store
When you run the demo I store the synthetic event the system generated (fictional account, a documentation-range IP address, the decision and the audit record) and a visitor hash. The hash is an HMAC of your IP address with a secret key; your IP address itself is never stored.
Retention
Events and your interventions are kept 24 hours and then deleted automatically. The alert-slot records that enforce the rate limits are kept 25 hours and then deleted.
Cloudflare Turnstile
To tell people from bots, the demo uses Cloudflare Turnstile. It runs only when you press the button, and Cloudflare processes the check under its own terms.
Telegram
Each run can send a short alert to the site owner through Telegram. The message contains only fixed text: scenario, decision, rule, time and a read-only link to the event. It never contains anything you typed, because you type nothing.
Browser storage
The event identifier is kept in your browser session storage so a page reload restores the result. It is not a cookie, is not sent anywhere except to this site, and disappears when you close the tab.
Your data
The demo asks you for no personal data. If you write to me by email, I use your message only to reply.