For most visitors, this site collects nothing.
No accounts, no forms, no cookies, no analytics, no trackers — and the fonts are self-hosted, so loading a page here sends no request to any third party. This page explains the one exception (the Eval Bench relay) and your rights. The site is operated by Ousios LLC, the data controller (company details on the Ousios legal notice).
Last updated 12 July 2026 · Contact: kira@kirahancock.com
What the site doesn't do
No cookies are set. No analytics run. No advertising or social scripts load. There is no visitor database, and the server functions write nothing to storage or logs. If you just read pages here, there is no personal data of yours for us to hold, hand over, or lose.
The one exception: Eval Bench
The Eval Bench tool can run live AI calls. Two modes, two very different data paths:
Free runs (our relay)
The prompt text you submit is sent to our server, which forwards it to Anthropic (the AI provider) and returns the answer. Nothing is stored or logged — not the prompt, not the answer. To prevent abuse, the server counts requests per IP address in short-lived memory only (a daily rate limit); the count evaporates when the server instance recycles and is never written anywhere. Legal bases: providing the run you requested (Art. 6(1)(b) GDPR) and our legitimate interest in abuse prevention (Art. 6(1)(f)).
Bring-your-own-key runs
Your browser calls Anthropic directly — the traffic never touches our server. Your API key is saved only in your own browser's localStorage, where you can clear it any time.
On your device only
Eval Bench keeps its working state — drafts, run history, your saved key, the daily free-run counter — in your browser's localStorage, at your request, on your device. Nothing in localStorage is transmitted to us.
Email, processors & transfers
Email: the contact links here are plain mailto: links. If you write, your address and message are processed to reply, kept as long as the correspondence needs, then deleted in periodic inbox reviews.
Processors: two companies process data for us, both in the USA under data-processing agreements with EU-approved safeguards (EU–US Data Privacy Framework and/or standard contractual clauses): Vercel (hosting — sees traffic IPs as any host does) and Anthropic (receives Eval Bench relay prompts, as above). No one else receives anything, and nothing is ever sold.
Your rights
Under the GDPR and equivalent laws you can request access, correction, deletion, restriction, portability, or object to processing — email kira@kirahancock.com and you'll have an answer within one month. To protect your data from impostors, we act on requests sent from — or confirmed by — the email address the data concerns; where that's impossible, we'll agree a simple alternative proof with you. For most visitors the honest answer will be that there is nothing on file beyond any email you've sent. You can also complain to your local data-protection supervisory authority. This site isn't directed at children under 16.
US state privacy laws: Ousios LLC is currently below the applicability thresholds of the CCPA/CPRA, the Colorado Privacy Act, and similar state laws. The rights above are honored for everyone regardless, and nothing is sold or shared in any state's sense of those words.
When this policy changes, the date at the top changes with it. The current version always lives at kirahancock.com/privacy — and every prior version is preserved in the site's public change history.