Privacy

Your request text is sent to OpenAI, Anthropic, Google and TypeSafe to interpret it and to check the result. Do not include confidential data. The design is made in your browser.

What leaves this device

• "Interpret request" sends the request text and the answers to clarification questions to the server of this tool. The server sends them to the providers named above. No other data of the request or the design leaves the device.
• "Fill in the form yourself" sends nothing. The tool works without the translation service.
• The design, the run sheet, the report and the R code are made in the browser. They do not leave the device.

What the server keeps

• The server keeps no request text. It has no accounts.
• For each interpretation, the log has one line: the time, the outcome, the mode, the tokens, the duration, the cost, the model ids, and the versions of the prompt, the schema and the Jev questions. The log has no request text and no IP address.
• The rate limit counts the requests of each network address for one minute and for one day (UTC). The count is kept in a Redis database (Upstash) under a keyed hash of the address, not the address, and is deleted after at most two days. The address is not written to the log.
• The host, Vercel, keeps its standard request logs, which include the IP address.

The providers

• OpenAI: the tool sends each request with the option store set to false. The OpenAI API terms apply.
• Anthropic and Google: the API terms of each provider apply.
• TypeSafe (Jev): TypeSafe states that it does not train on inputs and that it hosts data in the United States. It offers zero data retention only to enterprise customers. The TypeSafe Master Customer Agreement (Sections 4.1 and 4.3) gives TypeSafe a perpetual right to derive telemetry, including "learnings", from requests, and to use it without restriction.

What stays on this device

• IndexedDB database "ffd-projects": the projects (the request, the card, the design and the report). "Clear" in the sidebar deletes them.
• IndexedDB: the R packages of the R engine (WebR), so that a later visit downloads nothing, and the empty database "ffd-probe", which tests that IndexedDB works.
• localStorage: "ffd:last-page" (the last page of the workspace, which a later visit opens) and "ffd:show-explanations" (the "Show explanations" switch).
• The tool sets no cookies and loads no analytics.

Without storage, for example in private browsing, projects last only for the session.

Later versions

Phase 2 adds "Explain this chart with AI", off by default. Before the first request, a dialog shows the exact data to be sent and the provider.