Privacy, in plain language.

Who runs this site

Brainn.dev is operated by Chuck Gamburd in the Detroit area, United States. For privacy questions, access, corrections, deletion requests, or to stop development emails, contact brainn.dev@agentmail.to.

Reading and browsing

You can read the blog, explore the portfolio, and play the public demo without creating an account. We do not use visitor analytics scripts. Google Search Console provides search visibility reports; it does not add a tracking script to these pages. Ad serving is disabled. The site does not load Google’s advertising or consent scripts.

OpenAI Sites and Cloudflare provide hosting and delivery. Requests can include your IP address, browser information, requested URL, and time of access. Our hosting providers process technical information and logs to deliver the site, diagnose problems, and limit abuse. Their retention and backup practices also apply; this site does not promise immediate removal from provider logs.

Game saves stay in your browser

Stupid People stores its save and preferences in your browser on this site. The demo does not upload your save to a Brainn.dev account. Use the game’s save controls to manage your run, and export a copy if you want to keep it. Clearing browser site data removes local saves and preferences; it also signs you out of other Brainn.dev features using browser storage.

Earlier TurtlePen signups

If you used the earlier signup, Supabase may retain your email, identity, and TurtlePen interest metadata. That form used browser storage for its session and pending choice. These records are not automatically enrolled in the new email lists. Please confirm fresh choices in your account. For removal of the earlier identity or metadata, email brainn.dev@agentmail.to. Clearing browser storage does not delete server records.

Accounts, comments, and optional emails

Supabase verifies your email. Brainn.dev stores encrypted sign-in tokens on the server and an essential HttpOnly session cookie in your browser. Sessions expire after seven days of inactivity or thirty days from sign-in. Sign-in attempts expire after ten minutes. Expired records are removed during maintenance; provider logs and backups can remain longer.

Cloudflare D1 stores your account identifier, email preferences, consent times, comments, and delivery history. Approved comments show your chosen display name and text publicly. Pending and rejected comments are visible to you and moderators. Edits return to review. Your email is never part of a public comment.

Daily Bites and weekly updates require separate choices. Signing in alone does not subscribe you, and older TurtlePen signup metadata is not automatically added to the new lists. Resend processes recipients and email content for delivery, bounce handling, and complaint suppression. Every optional email has a no-login unsubscribe link. Daily Bites are limited to one per day while new lessons are available; weekly categories share a seven-day limit.

Your account lets you change preferences, export your comments and choices, and remove Brainn.dev comments, subscriptions, and sessions. Delivery history is retained with the subscription to prevent duplicate messages. Removing this data does not remove your Supabase identity or older signup metadata; request that through brainn.dev@agentmail.to. Moderation audit records expire through maintenance after ninety days. Technical delivery feedback identifiers expire after thirty days. See Resend’s privacy policy.

Hosted TurtlePen drawing sessions

Using the hosted TurtlePen tool sends tool arguments, drawing content, and generated artifacts to the server. Cloudflare stores session state and artifacts so later tool calls can continue the drawing. This is temporary working storage, so download anything you want to keep and avoid submitting secrets or sensitive personal information.

Sessions expire after one hour without activity or eight hours from creation. Expired content becomes unavailable through the session; stored artifacts are removed by cleanup during subsequent requests, so physical deletion can happen later. The service also temporarily stores a shortened hash of the network address for rate limiting. Your AI app or other connecting client has its own data practices.

Advertising and your choices

Ad serving is currently disabled while Google reviews the site and we verify the integration. The blog placement is prepared; it is not serving ads.

Our integration requests non-personalized ads. Google and its advertising partners can still process device, cookie and network information to deliver and measure ads and limit fraud. Loading Google’s privacy controls also sends technical request information to Google. The applicable consent message lists vendors and purposes and offers your choices; this privacy notice is not itself consent.

Google consent controls will become available here when advertising is activated. We also honor Global Privacy Control by keeping ads off, and provide a separate browser preference that turns off ads on Brainn.dev. That preference is saved in browser storage, stays until you change it or clear site data, and does not affect game saves or your Google account. Google stores consent records under its own consent framework.

You can also manage Google’s personalized advertising through My Ad Center, and find choices for participating vendors at YourAdChoices. Google explains how it uses information from partner sites.

Messages, external services, and retention

When you email us, your address and message are processed through Gmail so we can respond. Avoid including passwords, payment details, or sensitive documents. Correspondence is kept as needed to handle the conversation and related records; you can ask us to delete it. We may need to retain information for legal obligations, security, or unresolved requests, and provider backups may expire later.

External links, including GitHub, Buy Me a Coffee, and sign-in providers, lead to services with their own privacy policies. Information handled by our service providers may be processed outside your country. Relevant provider information is available from OpenAI, Cloudflare, Supabase, and Google.

Requests and changes

You may have rights to access, correct, delete, or obtain a copy of your information, object to certain processing, or withdraw consent, depending on where you live. Send a request to brainn.dev@agentmail.to. We may need to confirm that you control the relevant account before acting. You can also contact your local data protection authority.

We will revise the effective date when this notice changes. For general feedback, project questions, and article corrections, visit Contact.