Privacy & Cookie Policy

1. Who this policy covers

This policy applies to Verdixt (https://debate-b3gxdj9iq-gurjeetsinghvirdees-projects.vercel.app), an AI debate tool that argues a topic from three perspectives and returns a verdict. Verdixt is currently operated by an individual developer rather than a registered company. That developer is the data controller for the personal data described below and is reachable at the address in Section 8.

2. Information we collect

• Debate content. The topic you submit, the generated debate (safe / bold / practical arguments and the final verdict), and which display mode you used.
• Session identifier. A random id stored in the debate_session cookie, used to associate your debates with your browser and to enforce fair-use limits. It does not identify you by name.
• IP address. Your IP address is recorded against each debate you run, and a separate one-way hashed form of it (which cannot be reversed back into the original address) is used for rate limiting and abuse/spend controls. We do not store IP addresses for any other part of the site.
• Usage metadata. Token counts, estimated cost, and response time for each debate, kept for internal capacity and cost monitoring.
• Ratings and feedback. If you rate a verdict, we store the rating (1–5) against that debate. If you also write a comment, we store that text so we can act on it. Both are optional, and the comment box asks you not to include personal details.
• Security logs. When a request is rejected or flagged (rate limiting, malformed input, suspected prompt injection), we log the event type, severity, and a hashed IP/session reference - never the raw query text.

3. Why we process this data

We rely on legitimate interest, not consent, for the categories above: running the debate you asked for, keeping the free tier usable by stopping abuse, and diagnosing errors. Analytics is the one exception and only runs if you accept it in the cookie banner (see Section 6). We do not use any of this data for advertising and do not sell it.

4. Who else processes it

We use a small number of infrastructure providers to run the product. Each acts as our data processor under its own agreement and does not use your data for its own purposes.

• Anthropic - your debate topic is sent to Anthropic’s Claude API to generate the debate arguments and verdict.
• Supabase - hosts the database that stores debates, session data, and security logs.
• Vercel - hosts the application and, if you accept analytics, provides cookieless aggregate traffic analytics.
• ipwho.is - when an administrator looks up a specific debate, its stored IP address may be sent to this service to resolve an approximate city/region/country for abuse investigation. This lookup is never triggered by normal use of the product, only by admin review.

5. How long we keep it

• Debate content and the IP address tied to it are kept until you request deletion (Section 7) - there is currently no automatic expiry on debate history.
• Security logs and error logs are retained for up to 90 days, then purged.
• Ratings and written feedback are retained for up to 180 days, then purged.
• Rate-limit and per-IP spend counters are short-lived and cleared after a few days.
• The session cookie expires after 24 hours.

6. Cookies

Strictly-necessary cookies are set automatically and don’t require consent under GDPR/ePrivacy, since the product cannot function without them. If you accept analytics in the cookie banner, we load Vercel Web Analytics, which is cookieless by design and only reports aggregate traffic - it is never loaded if you reject or dismiss the banner.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data described above, and to object to or restrict its processing. To exercise any of these, email us at the address in Section 8 with the topic or approximate date of the debate(s) in question - we don’t require an account, so that’s the fastest way for us to locate your data. We will respond within a reasonable time and in any case within 30 days.

8. Contact

Questions about this policy, or a request under Section 7? Reach us at gurjeetsinghvirdee@gmail.com.

9. Changes to this policy

If this policy changes materially, we will update the effective date above. Continued use of Verdixt after a change constitutes acceptance of the revised policy.