Privacy Policy

Last Updated: October 1, 2026

CW Strategies LLC ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use claudewill.io, including CW, the AI conversational assistant on the site ("Service"). CW is the name of the AI. CW Strategies LLC is the company that runs the site.

Key Point: We collect conversation data to improve CW. Your conversations are logged but not linked to your personal identity.

1. Information We Collect

When you use CW, we collect:

Conversation Content: Your messages to CW and CW's responses
Session Information: A random chat session ID created by your browser. It lives in memory for the page you're on and is gone from your browser when you leave the page.
Visitor Memory: A unique visitor token (UUID) kept in your browser's localStorage until you clear site data. It is a different ID from the chat session ID. This allows CW to recognize returning visitors.
Name Detection: If you share your name during conversation, CW may detect and store it to personalize future visits. This is stored in Supabase alongside your visitor token.
Session Summaries: When you leave the page, a brief summary of the conversation is generated and stored. On return visits, these summaries are included in CW's context so the conversation can continue naturally.
Technical Data: Hashed IP address (for abuse prevention), timestamps, token usage metrics
Metadata: Time of day conditions (dawn, clear, dusk, etc.) used to inform CW's tone

Work Inquiry Form: If you use the form at claudewill.io/work, we collect the name, email address, organization (optional), and message you type in. We use it only to read your note and reply to you. It is saved in a private database and emailed to Derek. It is not public, and it is not sold or shared.

What We Don't Collect:

Browser fingerprints
Location data beyond general timezone
Raw IP addresses (only cryptographic hashes)

Clearing Your Visitor Memory: You can clear your visitor token and all local data by clearing your browser's localStorage for claudewill.io. This will reset CW's memory of you. To also delete server-side data (conversation summaries, stored name), contact Derek using the information below.

2. How We Use Your Information

We use collected data to:

Improve CW: Analyze conversations to refine system prompts and response quality
Prevent Abuse: Detect spam, harassment, or attempts to bypass rate limits
Monitor Costs: Track API token usage to manage infrastructure expenses
Understand Usage: Analyze conversation patterns, common questions, and session lengths

We do not use your data for advertising, marketing, or selling to third parties.

3. Data Sharing & Third Parties

Your conversations and form submissions are processed by the following third-party services:

Anthropic (Claude API): Processes messages to generate CW's responses. See Anthropic's Privacy Policy.
Supabase: Stores conversation logs. See Supabase's Privacy Policy.
Netlify: Hosts the service and routes traffic. See Netlify's Privacy Policy.
Resend: Delivers the email that sends your work inquiry to Derek. See Resend's Privacy Policy.

Voice: The microphone button uses your browser's speech-to-text, so your browser maker may process that audio. The Hello button on /derek plays audio made with ElevenLabs from the page's text.

We do not sell, rent, or share your data with any other parties except:

When required by law (subpoena, court order)
To protect rights and safety (fraud, abuse, security threats)

4. Data Retention

We keep conversation data until we delete it. There is no automatic deletion schedule yet, and we won't claim one until it runs.

You can ask us to delete your data at any time (see Your Rights below).

5. Your Rights

You have the right to:

Access Your Data: Request a copy of conversations associated with your session IDs
Delete Your Data: Request deletion of specific conversations or all data associated with your session IDs
Correct Your Data: Request correction of inaccurate information (though we collect minimal personally identifiable data)
Object to Processing: Request we stop processing your data (note: this means you cannot use the Service)

To exercise your rights: Contact Derek with your session ID(s) if known, or describe the conversation timeframe and content.

6. International Users

GDPR (European Union): If you're in the EU, you have additional rights under GDPR including data portability. Our legal basis for processing is legitimate interest (service improvement) and your consent through continued use.

CCPA (California): California residents have the right to know what data is collected and request deletion. We do not "sell" data as defined by CCPA.

Data is stored on servers in the United States. By using the Service, you consent to data transfer to the US.

7. Security

We implement security measures including:

HTTPS encryption for all traffic
IP address hashing (not storing raw IPs)
Secure environment variable storage
Rate limiting (20 requests/min per IP)

However, no internet transmission is 100% secure. Use CW at your own risk and avoid sharing sensitive personal information.

8. Children's Privacy

The Service is not intended for users under 13 years old. We do not knowingly collect data from children under 13.

If you're 13-17, you must have parental consent to use this Service.

If we learn we've collected data from a child under 13, we will delete it immediately. Contact Derek if you believe this has occurred.

9. Cookies & Tracking

Our own code does not set cookies. We do count visits anonymously: each page load records the page address, the page you came from, your browser type, and a random ID that stays in your browser until you clear site data. A second note records whether you stayed ten seconds. None of it holds a name or email. We also use Google Analytics, which sets its own cookies and reports to Google. You can block both with a browser extension or your browser settings.

Each chat gets a random session ID that lives only in memory for the page you're on, and is gone from your browser when you leave the page. The visitor token described in section 1 is different: it stays in your browser until you clear site data. Both IDs:

Are created locally by your browser
Are not shared with third parties
Cannot track you across websites

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

For significant changes, we'll display a notice on the home page for 30 days.

Continued use of the Service after changes constitutes acceptance of the new policy.

11. Contact

Questions, concerns, or requests regarding this Privacy Policy? Contact Derek.

Response Time: We aim to respond to privacy inquiries within 7 business days.