Whose Fault Is ItPrivacy
The one sentence that matters
The chat is sent to TypeSafe to score, then we drop it. We don't keep the messages.
What happens to your chat
You upload a WhatsApp export. Before anything is scored, the two speakers become “You” and “Them” in your browser, and phone numbers and email addresses are stripped out. The real names never leave your browser. The file stays in your browser until you pay the $3.99. After payment, the redacted transcript is sent to TypeSafe to score. After a successful score, or a safety stop, the transcript is dropped. We do not store raw exports.
The full analysis ($9.99)
If you buy the full analysis, the same redacted transcript (You and Them, no numbers, no addresses) stays in your browser until the payment succeeds, is then sent to our server once, is passed to Anthropic's language model to write the prose, and the PDF is returned to you in that same request. We then drop the transcript. We do not store the chat, the PDF, or any pending analysis. Leave the screen before downloading and it is gone. We keep a one-way hash of the transcript next to your payment record so a second upload cannot be passed off as the chat that was scored; the hash cannot be turned back into messages.
What we keep
We keep the score payload - the fault percentages, the three receipts (numbers), and the template line - under a short share id for 90 days, then it is deleted. We keep a hashed copy of your one-time delete secret so you can take the card down, and the payment state Stripe needs for the charge and any refund. Nothing we keep can reconstruct your chat: no quotes, no message text, no real names. On the landing page we count unique visitors using a random id stored in your browser; we only keep a one-way hash of that id so we can increment the total without knowing who you are.
Who processes it, and where
The app runs on Railway in Amsterdam, in the Netherlands (region europe-west4-drams3a); your chat is processed in the Netherlands. Scoring is done by TypeSafe (its classifier is called Jev). The full analysis prose is written by Anthropic. Payment is handled by Stripe. Those are the four services that can touch your chat, and none of them ever sees a name.
Ads and the Meta pixel
We advertise on Meta (Facebook and Instagram). To know which ad brought you, we use the Meta pixel in your browser and Meta's Conversions API from our server. It reports funnel steps (page viewed, file read, checkout started, purchase) and the price, plus the identifiers Meta needs to match an ad click: its own cookies, your IP address, your browser, and, for a purchase, a one-way hash of the email Stripe collected. It never receives the chat, the receipts, the percentages, or a name. If you are in Europe we ask first and load nothing until you say OK; elsewhere it is on by default. Either way you can switch it off with “Ad tracking” in the footer. Separately, if you arrived from a link with campaign tags (utm_ parameters), we store those tags next to your payment so we can count sales per ad. They say which ad, not who you are.
Consent
You confirm you are 18 or older, that you are one of the two people in the chat, and that you will not post their messages. A checkbox is not the other person's consent. You are uploading a private conversation that involves someone else, and that risk is yours.
This is entertainment. Not therapy, not a legal finding, and not a verdict about a named person.