Privacy Policy

Who operates this service

DeadGraph is operated by an individual developer. It is a personal project and demo site, not a commercial product. Questions can be directed to support@deadgraph.com.

What data we collect

We collect only what is necessary to operate the service:

• Email address - collected when you sign in via Google or email verification code. Used solely for authentication.
• Chat queries - the questions you ask the chatbot are logged to identify usage patterns and improve the service. Queries are associated with a hashed (anonymized) user identifier, not your email directly.
• IP address (hashed) - we hash your IP address for rate limiting purposes. The raw IP address is not stored.
• Session cookies - a session cookie keeps you logged in across visits. See the Cookies section below.
• Country code - Cloudflare provides a country code with each request. We use this to enforce the US-only geographic restriction and do not store it.

We do not collect payment information, physical addresses, phone numbers, or any sensitive personal data.

How we use your data

• Authentication - to verify your identity and maintain your session
• Service operation - to process your chat queries and return results
• Abuse prevention - hashed IP addresses enable rate limiting to prevent misuse
• Analytics - aggregated query logs help us understand how the service is used and improve it
• Service improvement - patterns in queries help us tune the AI responses and knowledge base

We do not sell your data to third parties. We do not use your data for advertising. We do not build profiles for resale or marketing purposes.

Data storage and infrastructure

All data is stored on Cloudflare infrastructure:

• Cloudflare D1 - relational database storing chat query logs and user records
• Cloudflare KV - key-value storage for session data and rate limiting state

Cloudflare's infrastructure is US-based. DeadGraph itself is geofenced to US-only access. By using the service, you acknowledge your data is processed and stored in the United States.

Data retention

• Session cookies - expire after 30 days of inactivity
• Query logs - retained indefinitely for analytics unless you request deletion
• Email addresses - retained while your account is active

Third-party services

DeadGraph uses the following third-party services that may process your data:

• Google Sign-In - if you choose to authenticate with Google, Google processes your credentials per their own privacy policy. We receive only your email address and a unique identifier.
• Cloudflare - all web traffic passes through Cloudflare's network, subject to their privacy policy. This includes edge processing of request metadata.
• Anthropic (Claude) - chat queries are sent to Anthropic's API to generate AI responses. Anthropic may process query content per their privacy policy.

Cookies

We use a single session cookie:

• dg_auth - a secure, HttpOnly session token that identifies your authenticated session. It does not contain personal information - only a hashed token used to verify your login. This cookie is required for the service to function. Expires after 30 days.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Your rights

You have the right to request:

• A copy of the data we hold associated with your email address
• Deletion of your account and associated data
• Correction of inaccurate data

To exercise these rights, email support@deadgraph.com from the address associated with your account. We will respond within 30 days.

Children's privacy

DeadGraph is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this privacy policy as the service evolves. Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact