Privacy & Cookies

The short version

• We don't ask for your name, email, or account. There's no login.
• We send the task you submit to Anthropic's Claude API to score it.
• For analytics we use Umami, a privacy-friendly tool that sets no cookies and collects no personal data — so there's no cookie banner to click.
• Public submissions are visible to anyone at /can-ai/<slug> and in the Library. Mark a submission private if you don't want it indexed.

Who we are

Good AI Task (the "Service") is operated by Obrari, the data controller for the purposes of the EU/UK GDPR. For privacy questions, email hello@obrari.com.

What we collect

Task text you submit

Whatever you type in the form is stored so we can score it, deduplicate it against similar questions, and (if marked public) display it in the Library. Avoid pasting personal data, secrets, or anything you wouldn't post publicly.

Server logs

Our hosting provider records standard request logs (IP address, user agent, URL, timestamp) to operate the Service and prevent abuse. Retained for up to 30 days.

Analytics — privacy-friendly, no cookies

We use Umami, a privacy-focused analytics tool. It collects aggregate, anonymous usage data (pages viewed, referrer, device type, approximate country) without setting cookies and without tracking you across sites or building a profile of you. No personal data is collected, so there's nothing to opt into or out of.

Legal basis (GDPR Art. 6)

• Contract / performance of service for processing your submitted task and returning a score.
• Legitimate interest for security, abuse prevention, basic server logs, and cookieless, anonymous analytics (Umami) that do not identify you.

Who we share data with

• Anthropic (Claude API) — receives the task text in order to generate the score and reasoning. Anthropic processes the data under their privacy policy.
• DigitalOcean — hosts our database and application servers in the EU.
• Analytics — handled by Umami, which we self-host on our own infrastructure at analytics.obrari.com. Anonymous, aggregate usage data stays with us and is not shared with any third-party analytics provider.

Some of these processors are based in the United States; transfers rely on Standard Contractual Clauses or equivalent safeguards.

Cookies & local storage

The Service sets no cookies at all. Our analytics provider, Umami, is deliberately cookieless — it measures traffic using anonymous, aggregate signals and never stores an identifier on your device. Because nothing we run requires consent under PECR/ePrivacy, there is no cookie banner.

Retention

• Submitted tasks: retained indefinitely while the Service is running, unless you ask us to delete a specific submission.
• Server logs: up to 30 days.
• Analytics data: anonymous, aggregate metrics retained by Umami; it contains no personal data and cannot be tied back to you.

Your rights

Under the GDPR (and equivalents like the UK GDPR and CCPA), you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion.
• Object to or restrict certain processing.
• Data portability.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with your local data protection authority.

To exercise any of these, email hello@obrari.com. Because we don't have accounts, please include enough detail (e.g., the URL of a public submission) for us to find the relevant data.

Children

The Service isn't intended for children under 16. We don't knowingly collect data from them.

Changes to this policy

If we make material changes, we'll update the date at the top of this page. Continued use of the Service after a change means you accept the updated policy.