Privacy policy

Effective 29 October 2026

whatisai.fyi collects only the information needed to operate the contact form, understand limited site activity and protect the service. It does not sell personal information or use behavioural advertising.

Information collected

• Contact messages: the name, email address, reason, message and page reference you submit.
• Newsletter: if you subscribe to the aiml.sh newsletter, the email address you enter is sent to Kit to process your signup and deliver email updates. Confirm your subscription using the email Kit sends; you can unsubscribe through any newsletter email.
• Reading events: a short, fixed list of first-party events, described below, used to learn which explainers and learning paths help readers.
• Security records: short-lived request and rate-limit information needed to protect public forms and APIs. Production proxy logs are configured to remove query strings, referrers, cookies and authorization headers.

Reading events, exactly

This site is open source, so anyone can read the code that records these events. Nothing is recorded if your browser sends Do Not Track or Global Privacy Control, or if it looks like a bot. Each event is one of these, and nothing else:

• Search: the words you searched for (lowercased, at most 120 characters), how many results appeared and which result you opened. Search words are deleted after 30 days.
• Pages opened: which category, explainer, deep dive or nearby term you opened.
• Learning path: on Start here, whether you chose “I'm new to AI” or “I know the basics”, and which lesson you opened from the path.
• Explainer sections: which section of an explainer you scrolled to, such as “how it works” or “sources”.
• Links out: the number of a source you opened (for example source 3), or which company newsroom you opened from AI news. The link address itself is not recorded.

With each event the site stores the page address, the name of the website that sent you, the time, and a random ID kept in one first-party cookie so repeat visits are not counted twice. Only a keyed hash of that ID is stored. The site never stores your IP address, name, email, what you type into forms, or any other text. Events are deleted after 90 days and are never sold, shared or used for advertising.

Separately, the site counts page views with Umami, a self-hosted analytics tool that uses no cookies. It records the page, the name of the website that sent you (not the exact page you came from), your browser, device type and country, how quickly the page loaded, and which parts of the site you click, such as a news story, a learning step or whether a search found anything (never the words you typed). If you arrive through a link from the site's Share button, it also records which share option was used, never who shared. It does not store your IP address, it skips browsers that send Do Not Track, and it ignores automated browsers. The counts stay on the site's own server.

How information is used

Information is used to respond to messages, process requested newsletter subscriptions, measure aggregate interest, prevent abuse and keep the service reliable and secure. The site has no sign-in and no reader accounts. Newsletter signup requests go directly from your browser to Kit, which also receives connection information such as your IP address. Newsletter addresses are not saved in WhatIsAI’s application database or logs.

Service providers

The optional aiml.sh newsletter uses Kit to process subscriber email addresses and send newsletters.

The service uses Supabase for application data, Cloudflare for DNS, edge security and private tunnelling, and a private container registry and hosting infrastructure for deployment. Each provider processes data under its own terms and privacy commitments.

Retention and deletion

Records are kept only for as long as they are needed for the purposes above, legal obligations and security. To request access, correction or deletion, email info@whatisai.fyi or use the privacy contact form.

Security

Reasonable technical and organisational safeguards are used, including encrypted connections, restricted server credentials, origin and request validation, rate limits, database access controls and isolated production services. No Internet service can promise absolute security.

Children

The service is not directed to children under 13, and it does not knowingly collect their personal information.

Changes and contact

Material changes will be reflected on this page with a new effective date. Questions may be sent to info@whatisai.fyi.