Who is responsible
Convincer is the data controller for the personal data described here — it decides what is collected and why, and it is answerable for both.
Where to write, by subject:
- privacy@convincer.site — your data: a copy of it, a correction, deletion, or a complaint about how it was handled.
- legal@convincer.site — a listing you want to claim or remove, a reply to a verdict, a factual correction, anything about the terms.
- security@convincer.site — vulnerability reports.
- support@convincer.site — billing and refunds.
What is collected
Convincer is deliberately thin on data. There is no analytics package, no advertising network, no tracking pixel, and no third-party script of any kind — the site’s content security policy refuses to load one. What exists is what the service cannot run without:
| Data | Why it exists | How long it is kept |
|---|---|---|
| Your email address | It is your account identity, the way you sign in, and where trial notifications go. There is no password to store. | Until you delete your account. |
| A session cookie | Keeps you signed in between pages. See the Cookie Policy. | 30 days, then it expires on its own. |
| A sign-in link token | The single-use token in a sign-in email. Stored hashed, never in readable form. | 15 minutes, or until used. |
| Your product filings | Dossiers, cases, defences, cited evidence and the resulting verdicts. This is the public record the site exists to publish. | Indefinitely — see “The public record” below. |
| Payment records | Which credits you bought and when. Card details never reach this server: payment happens on Stripe’s own checkout page. | As long as required for tax and accounting. |
| Your IP address | Rate limiting and abuse prevention, and the web server’s access log. | The rate limiter holds it in memory only and forgets it when the process restarts. It is never written to the database. Access logs rotate on the server’s schedule. |
Legal bases
For anyone in the UK, EU or EEA, the bases relied on are:
- Contract — your email address, your account and your filings, and your purchases. Without these the service cannot be provided to you at all.
- Legitimate interests — rate limiting, abuse prevention, and keeping the trial record intact so that a published ranking stays auditable. The interest is running a service that is not trivially gamed; the processing is limited to what that needs.
- Legal obligation — retaining payment and tax records.
Consent is not relied on for anything, which is why there is no consent banner. That is a consequence of not tracking anyone, not an oversight.
The public record
Filing a case or a defence is publishing. Dossiers, arguments, cited evidence, juror reasoning, verdicts and ladder positions are public pages, indexed by search engines and readable by anyone. That is the point of the service: a ranking nobody can inspect is worth nothing.
Your email address is not part of that record. It is not shown on any page, not returned by the public API, and not sent to the jury.
Because a verdict is the outcome of a trial that another party contested, decided trials are kept after an account is deleted, with the filing detached from the account. A ladder whose history can be erased by the loser is not a record.
What the AI jury receives
Trials are decided by language models. The prompt sent to them contains the product name, tagline, dossier, the filed case, the defence and the cited evidence — the material both sides published in order to have it judged.
It contains no personal data: no email address, no account identifier, no IP address, no cookie. This is enforced in code and asserted by a test that fails if an account email ever appears in a generated prompt.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict or object to processing, or receive it in a portable form. Email privacy@convincer.site and expect a reply within 30 days.
Two limits worth stating plainly rather than burying: decided trials stay published after deletion (detached from your account, as above), and records needed for tax and accounting are kept for as long as the law requires.
You can turn off notification emails in your account at any time without deleting anything. Sign-in emails still send, because they are the only way to get into the account.
If you are in the UK, EU or EEA and think this has been handled badly, you may complain to your national data protection authority. You do not have to contact us first, though it is usually faster.
Security
- All traffic is served over HTTPS.
- Session and sign-in tokens are stored hashed — a copy of the database does not yield a working session.
- There are no passwords to leak, because there are no passwords.
- The content security policy blocks third-party scripts, so an injected script has nowhere to send anything.
- Filed text is scanned for prompt-injection before it reaches a juror, and jurors have no output field capable of declaring a winner.
No system is perfectly secure, and this one is small. If you find a vulnerability, please report it to security@convincer.site before disclosing it publicly.
Children
The service is for people running commercial products and is not directed at children. Accounts are not knowingly created for anyone under 16. If you believe a child has an account here, write to privacy@convincer.site and it will be removed.
Changes
If this policy changes in a way that affects you, the date at the top changes and account holders are emailed before it takes effect. Older versions are in the site’s public git history.