Back to Grandma Test

Privacy policy

Last updated:
Effective:

The short version, dear

I don’t keep your pictures or your words, dear. I look, I tell you, I forget.

To read it, I send it to the AI that plays me. It doesn’t keep it either, and it doesn’t learn from it.

I do keep a visitors’ book, like the one at the library desk: when someone came, roughly where from, and which buttons they pressed. Never a name, and never what you showed me.

My cookies go on the report card, not on your computer. The doorman who checks you’re not a robot may leave one, but only for that job.

The proper version is below, in plain words. That’s the one that counts.

Skip to the full policy

Grandma’s short version above is a summary; the sections after it are what applies.

Who runs Grandma Test

Grandma Test, at https://www.grandmatest.com, is run by Lean Digital Agency LLC (“we” in this policy). Write to us about anything in it:

legal@leandigital.agency

What we receive

  • The picture, text or website link you show Grandma.
  • The text of your report, if you ask for a share card.
  • With every request, your IP address and browser details.
  • The signals our bot protection reads to tell people from bots.

What happens to what you show Grandma

  • Nothing you show Grandma is stored. It’s read in memory to write one report, then dropped. There are no accounts.
  • It goes to an AI model provider through Vercel AI Gateway, with zero data retention (it isn’t kept once the answer comes back) and no training (it isn’t used to train AI models). The Gateway keeps a record of each request, without its content, for 30 days.
  • If you show Grandma a website link:
    • our server looks up the website’s address;
    • the page is opened once, in a fresh browser on Vercel’s infrastructure, which is thrown away afterward;
    • the website sees a visit from Vercel, not from you, and may record that visit under its own policy;
    • the AI model sees only a screenshot of the page, never the link;
    • the screenshot comes back to you in the report and isn’t kept;
    • Vercel keeps basic records about the stopped browser, with nothing from what you showed Grandma, for up to 14 days.
  • Your report can repeat what you showed Grandma, including any names in it. It goes back to your browser only.
  • If you ask for a share card, your browser sends parts of the report back to us to draw it. Share card pictures are drawn on request and not stored. Names in Grandma’s guess or her last word aren’t removed, so check the card before you share it.

What we keep, and for how long

  • Our own log line for each request: the type and size of what you showed Grandma, how long it took, the verdict or error code, the type of error, the status code from the service we called, the step that failed, and the reason a link was turned away or couldn’t be opened. It never includes the content, the link or the website it points to. About one day.
  • Vercel’s records of each request, with your IP address, browser details and the page requested: about one day.
  • Analytics: at least 12 months (see “Analytics” below).
  • AI Gateway’s records of each request, without content: 30 days.
  • Vercel’s records about the fresh browser used for a website link, with nothing from what you showed Grandma: up to 14 days.
  • Firewall traffic records, with your IP address, browser details and a TLS fingerprint (a technical signature of how your browser makes a secure connection): for Vercel’s standard retention period.
  • Any email you send us: as long as we need it to answer you.

Vercel’s request logs, its firewall, its bot protection and the network the fresh browser uses may keep their own standard records, as described above.

Analytics

We use Vercel Web Analytics to see how many people visit and how Grandma Test gets used. For each page view and event, it records:

  • the time;
  • the page address, without anything after a “?” or “#”;
  • the address of the page you came from;
  • your country, region and city;
  • your operating system, browser and type of device;
  • short labels for what happened: that a report was asked for and what kind of thing it was, the verdict or the error code, that a share card was made, and that a report was switched between “a computer screen” and “a picture”.

It never records what you showed Grandma or what she said about it. Visitors are told apart by a scrambled code that’s thrown away after 24 hours. There’s no tracking across other websites.

Cookies

We don’t set cookies. Our bot protection, Vercel BotID, which works with Kasada, may set a security cookie to tell people from bots; it isn’t used for tracking or advertising.

Companies that help run it

  • Vercel hosts the site and runs AI Gateway, Sandbox (the fresh browser for website links), Web Analytics, BotID (bot protection) and the firewall.
  • One of several AI model providers, picked by Vercel AI Gateway for each request, runs the AI model that reads what you show Grandma and writes the report. We only use providers with zero data retention and no training.
  • Kasada provides bot protection, working behind Vercel BotID.
  • Google Workspace hosts our email, so it receives anything you send to legal@leandigital.agency.

Where it’s processed

In the United States. Our server code and the fresh browser for website links run in Vercel’s Washington, D.C. region (iad1), and the AI model runs in a US data center.

Children

  • Grandma Test isn’t directed at children under 13, and we don’t knowingly collect personal information from them.
  • A child’s drawing is handled like any other picture: read once, not kept.
  • Our terms of use require users to be 13 or older.

California

  • We don’t sell or share personal information, and we don’t use it for targeted advertising.
  • Do Not Track and Global Privacy Control: there’s no tracking across other websites here, so there’s nothing for them to turn off.

Your choices and requests

Apart from the request, firewall and security records and any email you send us, all described above, we keep nothing that identifies you, and our analytics can’t be linked back to a person. Write to us with any question about your information:

legal@leandigital.agency

Security

Grandma Test uses HTTPS everywhere, so what travels between your browser and the site is encrypted.

Changes to this policy

When we change this policy, we update the “Last updated” date at the top of this page.