aileena.xyz (the “Site”) is a personal website. Below is exactly what happens with anything you share with it. Nothing more, nothing less.
What you send
The Site only stores something when you actively send it:
- Agent lead-capture. If you talk to the on-site agent (the Aileena Console) and then enter your email (with an optional name/note) to keep chatting, your email, the name/note, and the conversation transcript are forwarded to the Site operator so they can reply.
- Transcript forwarding. If you ask the agent to send the transcript on, the same applies — your email and the conversation are forwarded.
- Sign-in (for any gated page). If a page asks you to sign in, the Site sends a one-time link to the address you provide and uses that address to recognise you on the next visit.
That’s it for content you actively send. No Google or Meta pixel, no Hotjar / PostHog, no behavioural fingerprint, no newsletter list. The Site does keep a lightweight page-view counter — see “Analytics” below.
Console opening. The agent picks its greeting and suggested questions from the page you came from, the pages you viewed in this tab and your browser language. It counts opens, suggestion taps and first messages as aggregates with your country code only. No IPs, no cities and no message text are stored for this; unique counts use a salted hash that changes every day.
Where it goes
Anything you send through the agent lead-capture flow — your email, the optional name/note, the transcript you choose to forward — is delivered through Resend (a transactional email provider that does not keep a marketing copy) to the Site operator. That’s the only human destination. Nothing is sold, syndicated, or shared with anyone else.
The agent
The agent itself is a chat backed by a third-party large language model. When you send a message, the message — plus the last ~20 turns of the current conversation and a fixed system prompt about this site — goes over HTTPS to the model provider, which returns the response.
Current provider: Google (Gemini 2.5 Flash via the Gemini API, US). If the provider changes (for cost or latency reasons), the name above will be updated and the date at the top of this page will move with it. On Google’s free tier of the Gemini API, where this site currently sits, Google’s terms permit messages and responses to be used to improve their services; on the paid tier that does not apply. If traffic ever exceeds the free quota and the Site moves to paid, this paragraph will be updated.
You can also toggle the console to on-device mode via the cloud / local switch at the top of the chat. In that mode, your message and the reply stay entirely inside your browser — they are processed by the browser’s built-in language model (currently Chrome 138+’s Gemini Nano) and never reach this Site or its provider. Quality is more limited; the toggle lets you pick depth or privacy per question.
The Site itself keeps no separate copy of the full conversation beyond what’s described under “What you send” — i.e. only when you actively opt into the lead-capture flow.
Optionally, when Redis soft-memory is enabled on the server, the agent stores an anonymous list of recent questions and short topic tags keyed by a signed cookie (__aileena_vid). No name, email, or login. Entries expire after 90 days without a new message (sliding TTL). This lets the agent remember what you asked across visits on the same browser. Clear site cookies to drop the id; ask via the console if you want server-side erasure confirmed.
Analytics
The Site uses Vercel Web Analytics to count page views and unique visitors. It is cookieless, stores no raw IP address, and de-duplicates visitors via a hashed daily fingerprint that Vercel itself rotates and does not retain. No event-level tracking, no behavioural profiling, no third-party sharing. The dashboard shows totals (page views, unique visitors, top pages, country, device class) and nothing else.
Cookies
Two for the agent. (1) A signed cookie counts how many messages you’ve sent in a day so the per-visitor rate limit works — date + counter, expires after ~25 hours. (2) An anonymous visitor id (__aileena_vid) keys optional soft memory of recent questions; it lasts up to 90 days of inactivity and contains no personal profile fields.
Hosting
The Site runs on Vercel. Standard request logs (IP address, path, status code) live there briefly for operational and security reasons; they are not used for anything else and are not joined to your email or any other identifier.
Deleting your data
Want anything removed — your email, a transcript, a sign-in record? Reach out through the on-site Aileena Console (the agent panel, available from anywhere on the Site), or reply to any email this Site has previously sent you, and ask. No form, no friction. If you’re in the EU/EEA or UK, this is also how you exercise your access / rectification / erasure / objection rights under GDPR / UK-GDPR.
Children
The Site isn’t directed at anyone under 16. Please don’t submit personal data if you are.
Changes
If anything material here changes, the date at the top of this page will be updated.
Questions? Reach out through the on-site Aileena Console.