🔒 Privacy policy
Effective October 12, 2026. Plain-language summary first, details below.
The short version
- No ads, no tracking cookies, and we never sell or share your data. Accounts are optional and only needed to build your own tests.
- We count visits and button clicks with an anonymous ID, and we don't keep IP addresses in our records.
- We only have your email if you give it to us, for updates, to follow up on a use-case idea or to reply to a message, and you can ask us to delete it at any time.
- The AI providers receive the scenario text and questions: ours, or, if you have an account, the text you write yourself. They never receive your email or anything else about you.
1. Who we are
decidify.dev (“Decidify”, “we”) is run by [Your name or company], based in [your country]. Decidify lets you compare how decision AI services answer the same scenarios: our built-in ones, and, with an account, your own. For any privacy question or request, contact contact@decidify.dev.
2. What we collect and why
| What | Details | Why |
|---|---|---|
| Anonymous visit count | When a page loads, we create a one-way, keyed hash of your IP address and browser type and store it with the date. We store only the hash, never the IP address or browser string, and it can't be turned back into either. Known bots aren't counted. | To count unique visitors per day. |
| Button clicks | When you press “Run test” or “Download PNG”, we record the button, the date and the same anonymous ID. | To understand which features people use. |
| Test results | For each test: the scenario, each AI's answers, speed, cost and token usage. This contains no information about you. | To power the results you see and the public leaderboard. |
| Result links | Each test you run is saved under a random link (decidify.dev/r/…) so you can reopen or share it. It holds the scenario and the AIs' answers only, nothing about you. Anyone who has the link can see it. | So you can come back to a result and share it. |
| Account (optional) | Your email address and when you signed up; one-time sign-in links and sign-in sessions (stored only as one-way hashes); your API keys (stored only as hashes); the scenarios you build; your private run history (your last 200 runs, with the text, questions and the AIs' answers); and how many tests you ran each month. | To sign you in, keep your scenarios and history, run the API, and enforce plan limits. |
| Email for updates (optional) | Your email address, when you agreed, and the exact wording you agreed to. Only collected if you tick the consent box. | To send occasional emails about new AIs, scenarios and upgrades. |
| Use-case ideas (optional) | The text you submit, an optional category, the date, and your email only if you choose to leave one. | To improve Decidify and, if you left an email, to follow up about your idea. |
| Contact messages (optional) | What you write in the contact form, the topic and the date, plus your name and email only if you choose to leave them. A copy is emailed to our own inbox. | To read your feedback and, if you left an email, to reply. |
| Abuse protection | To enforce fair-use limits (for example 5 tests per minute), your IP address is used briefly to count recent requests. Only timestamps are kept, and they delete themselves within about two minutes. | To keep the site available and costs under control. |
3. Stored only in your browser
If you sign in, we set one cookie, dfy_session, that keeps you signed in for up to 30 days. It's strictly necessary for your account and isn't used for tracking. Otherwise Decidify uses your browser's local storage, not cookies, for your theme choice, links to your recent test results, and a note that this session's visit was counted. This data stays on your device and isn't sent to us. You can clear it at any time in your browser settings. Share images are created in your browser and saved straight to your device.
4. Services we rely on
- Cloudflare hosts the site, runs our code and database, and runs the Cloudflare Clef-flash model. Like any web host, Cloudflare processes request data such as IP addresses to deliver and protect the site, and keeps operational logs under its own privacy policy.
- AI providers: TypeSafe, Microsoft (Azure AI Foundry), OpenAI, and, through OpenRouter, Perplexity, Inception and Liquid AI. They receive only the scenario text and questions: our built-in ones, or the ones you write in your account. Don't put personal or confidential data in your own scenarios unless you're happy for these providers to process it. No visitor or account information is sent to them.
- Cloudflare Email Service sends sign-in links to your email address.
- Stripe processes payments if you buy credits or a plan. Stripe collects your card details directly; we receive only your email, what you bought and the payment status, which we keep for billing and accounting.
- Email delivery: if we send update emails, we'll use an email service provider that processes your address on our behalf only for that purpose.
Some of these providers are in the United States, so your data may be processed outside your country.
5. Legal basis (EU/UK visitors)
Email updates are based on your consent, which you can withdraw at any time. Accounts are processed to provide the service you signed up for. Anonymous visit and click counting, test results and abuse protection are based on our legitimate interest in running, improving and securing the site. Use-case ideas are processed because you chose to send them.
6. How long we keep data
- Email addresses: until you unsubscribe or ask us to delete them.
- Accounts: until you delete your account (one button on your account page), which removes your scenarios, history, API keys and sessions. Run history keeps your latest 200 runs. Sign-in links expire after 15 minutes, sessions after 30 days.
- Use-case ideas: until we've reviewed them, and any email with them until you ask us to delete it.
- Contact messages: up to 24 months, or sooner if you ask us to delete them.
- Anonymous visit and click records and test results: kept for statistics and the leaderboard, and deleted when no longer needed.
- Result links: 180 days, then deleted automatically.
- Abuse-protection timestamps: about two minutes.
7. Your choices and rights
You can unsubscribe from emails using the link in any email or by contacting us. Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to complain to your local data protection authority. Email contact@decidify.dev and we'll respond within 30 days. Because visit and click records are anonymous, we can't link them to you.
8. Selling, sharing and ads
We don't sell or rent personal data, share it for advertising, or use it to build profiles of you.
9. Children
Decidify isn't aimed at children under 16, and we don't knowingly collect their personal data. If you believe a child has given us their email, contact us and we'll delete it.
10. Security
Connections use HTTPS, our API keys are stored as encrypted secrets, our stats are visible only to us, and inputs are validated and rate-limited. No system is perfectly secure, but we keep what we collect to a minimum.
11. Changes
If we change this policy, we'll update it here and change the effective date. For significant changes, we'll tell subscribers by email.