The interactive tools on this site — the hash inspector, passphrase tools, CIDR inspector, runbook composer, and ZIP scaffold builder — run entirely in your browser and send nothing you type to a server. This note is about the one place that is different: the Chat with Grayson widget.
What the chat collects
When you send a message through the chat widget, it collects:
- your message;
- the reply-to you provide — an email, phone number, or @handle (required, so I have a way to answer);
- the page you sent it from;
- your approximate country (the country only, read from Cloudflare's network — not a precise location);
- the time you sent it, and an anonymous id that keeps your conversation threaded.
Where it goes
Your message and reply-to are sent to a private Telegram chat — that is how I see it on my phone — and they are also stored in a database (Cloudflare D1) so a note does not get lost before I can answer. Telegram and Cloudflare are the only services that handle it, acting as processors on my behalf.
It is not sold, not combined with data from anywhere else, not used for marketing, and not shared with anyone beyond that.
Why
One reason only: so I can read your message and reply to you. Nothing else.
Keeping it, and getting it removed
I keep what you send until I no longer need it to follow up with you. If you would like me to delete your message and contact details — or tell you what I have — email hello@graysond.xyz and I will take care of it.
The chat also remembers your conversation in your own browser so it survives a refresh. That copy lives only on your device and clears itself after a few idle days; clearing your browser storage removes it right away.
Analytics
Separately from the chat, this site uses Google Analytics to understand traffic — page views, section navigation, outbound clicks, and which tools get used. It records those events and sets analytics cookies, but it never receives the text you type into a tool or into the chat. If you visit from the EEA or UK, analytics stays off until you choose to allow it; from elsewhere it runs by default. You can decline, and clearing your browser storage resets the choice. More on that boundary is on the security page.
If this changes
If a later version ever does more with what you send — enrichment, a mailing list, anything beyond replying to you — I will update this note before that ships. The promise today is simple: what you send is used to talk to you, and nothing more.
Questions or a deletion request go to hello@graysond.xyz. You can also read how I work with people.