Privacy Policy

The short version

Browsing this site sets no cookies and stores nothing about you. We ask for exactly one piece of personal data, your email address, and only if you choose to type it into the early-access form.

Cookies

Loading any page of this site sets no cookies at all, and stores nothing in your browser for tracking.

One cookie exists, and only if you use the “Ask Mortal” chat. It is called m_ask, it holds a signed count of how many questions that browser has asked, and it expires after 24 hours. It exists to stop the chat being used as a free channel to a paid AI service, it is readable only by the server, and it carries no identifier of any kind. Under the ePrivacy rules this is a strictly necessary cookie, which is why there is no consent banner asking about it.

If you never open the chat, this site never writes a cookie to your browser.

The early-access list

If you submit the early-access form we store three things:

• Your email address, so we can tell you when the app opens.
• Which language version of the site you signed up from, so we write to you in that language.
• A one-way SHA-256 hash of your IP address. This is not your IP and cannot be turned back into it. It only lets us notice if one connection submits a hundred addresses.

What we do with your email

We use it to email you when early access opens, and for nothing else. We do not sell it, rent it, share it with advertisers, or add it to any other list. Every email we send will have an unsubscribe link.

Our lawful basis is your consent, which you gave by submitting the form. You can withdraw it at any time, and doing so does not affect anything we did before you withdrew it.

The Ask Mortal chat

When you send a question, the text of that question is forwarded to OpenRouter, which routes it to an Anthropic language model to generate the answer. Do not type anything into the chat that you would not want processed by a third party.

We do not store your questions or the answers. Alongside the question we keep a one-way hash of your IP address for 24 hours, purely to enforce the limit of five questions per day.

Analytics

We use Vercel Web Analytics to count page views. It sets no cookies, does not follow you between websites, and reports only aggregate figures such as how many people viewed a page. It does not build a profile of you.

Who else can see the data

We use three service providers, and each of them only processes what it needs to:

• Vercel — hosts the website and, like any web server, records requests in its logs.
• Supabase — the database that holds the early-access list and the rate-limit counters.
• OpenRouter, and through it Anthropic — receives only the text of chat questions, and only when you send one.

How long we keep it

Email addresses stay on the early-access list until you ask us to remove yours, or until the list has served its purpose and we delete it. Rate-limit records expire after 24 hours. Server logs are kept for as long as our hosting provider keeps them.

Your rights

If you are in the EU, the UK or another region with equivalent law, you have the right to ask for a copy of the data we hold about you, to have it corrected, to have it deleted, to object to how we use it, and to receive it in a portable form.

Email hello@mortal.ai and we will act on it. Because the only thing we hold is an email address, “delete everything about me” is genuinely one row, and we will confirm when it is gone. You also have the right to complain to your local data protection authority.

Children

This site is not aimed at children and we do not knowingly collect data from anyone under 16. If you believe a child has signed up, email us and we will remove the entry.

Changes

If this notice changes, the date at the top changes with it. If a change materially affects people already on the early-access list, we will email them rather than quietly editing the page.