Privacy

This is the personal site of Katharine Esterley, an individual based in Dublin, Ireland. I decide what is collected here and why, which makes me the controller of the personal data this policy describes.

For anything about your data, email privacy@katismindingherbusiness.com.

• There is no analytics, no advertising and no tracking of any kind.
• Nothing is sold or shared for marketing.
• If you only read the site, the only data involved is what any web server sees when it sends you a page.
• If you ask the assistant on the home page a question, that question is stored. The details are below.

The site is hosted by Vercel. To deliver pages and protect the site from abuse, Vercel processes the details that come with every request: your IP address, your browser and the page you asked for. I do not use these to identify or profile anyone.

When you send the assistant a question, I store:

• your question and the answer it gave
• a random session identifier, which groups the questions asked in one visit
• a pseudonymous code made from your IP address with a secret key. I cannot turn it back into the address, but questions sent from the same address share the same code
• which AI service answered, and when

I keep these to see how well the assistant answers and to limit how much it is used in a day. Only I can read them. There is currently no automatic deletion, so they are kept until I delete them, and I will delete yours if you ask.

To produce the answer, your question and the earlier messages in the same conversation are sent to the AI service that runs the assistant. Your IP address is not sent to it.

Please do not put personal information in your questions.

The resume password is checked and not stored. Unlocking it sets a cookie for two minutes so the file can open, described in the cookies policy.

Some projects on this site are open only to people I have invited. If you are one of them, I hold:

• your email address, which projects you can use and at what level, and when your access was granted
• when your account was created and when you last signed in. Supabase, which runs sign-in, also records sign-in events, including the IP address used
• for the sailing study project, which practice questions you answered and whether you got them right
• for Next Spot with editing access, the questions you ask its chat with their answers, and any places or visits you add or change
• for Next Spot with read-only access, only a count of how many questions you asked each day. The questions themselves are not stored
• for Next Spot, your location only if you turn on "Use my location". It is sent with each question you then ask, used to measure how far places are from you, and never stored. With editing access, the name of the neighborhood it places you in can be kept with the logged question. The map's locate button shows where you are without sending your location anywhere

Sign-in links are emailed to you through Google's Gmail. I use this information only to give you the access you have been given, and I keep it for as long as you have that access or until you ask me to remove it.

I rely on legitimate interests: running and securing the site, preventing abuse of the assistant, improving its answers, and providing the project access you have asked for. You can object to any of it, as described below.

These services process personal data on my behalf, only to provide what they do for this site:

Place details on Next Spot are looked up from Google and OpenStreetMap using the name and city of the place only. No information about you is sent.

Several of these providers are based in the United States. Where data leaves the European Economic Area, it is protected by the safeguards those providers offer, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

You can ask me for a copy of the personal data I hold about you, and ask me to correct it, delete it, restrict how I use it, or send it to you in a portable form. You can also object to my using it at all.

Email privacy@katismindingherbusiness.com. I will reply within a month. For questions you asked the assistant, tell me roughly when you asked and what, because I have no other way to find them.

If you are unhappy with how I handle your data, you can complain to the Data Protection Commission (opens in a new tab), Ireland's regulator.

This site is not aimed at children, and I do not knowingly collect data from anyone under 16.

If what the site collects changes, this page changes with it, and the date at the top moves.