Privacy

Your privacy, in plain words

Fairview is a small personal project. This page explains what we keep, why, who helps us, and what you can ask us to do.

Last updated: November 9, 2026

Who runs Fairview

Fairview is run by Joe Ball. For privacy questions, use the Requests & reports form. If you have an account, you can also download or delete your data yourself.

What we collect

Without an account

• The text or link you paste, and the breakdown we make from it.
• A scrambled version of your network address, only so we can limit how many free breakdowns one network can run in a day. We do not keep your raw network address in our own records for that limit.
• A simple count of how many breakdowns that network used today.
• Cloudflare’s “are you a person?” check may briefly see your network address. We do not save that raw address from the check in Fairview’s own records.

With an account

• Your email, so we can send a one-time sign-in code and recognize you later.
• Sign-in details: a random sign-in token (stored scrambled), when it expires, optionally what kind of browser you used, and a scrambled network address for that sign-in.
• One-time codes (stored scrambled). They expire in 10 minutes.
• Breakdowns you make while signed in (what you pasted, the title, which model wrote it, rough size/cost notes, and a stamp receipt if you asked for one).
• Links you submit as sources, plus a short note about whether they seem to support the claim.
• Usage counts and any problem reports you send.

We do not use ads, analytics trackers, or sell your data.

Why we use it

• To run the service you asked for — make breakdowns, show share pages, keep your account, and stamp a page when you choose to.
• To keep things fair and safe — daily limits, the person check, a spending cap, problem reports, and warnings or account blocks if needed.
• When the law requires it — uncommon for a project this size.

Who helps us

• Cloudflare — runs the website, stores the data, sends sign-in emails, and runs the person check. See Cloudflare’s privacy policy.
• xAI — the company that makes Grok. What you paste (and a short excerpt if you pasted a public link) is sent to xAI so Grok can write the breakdown. xAI says it does not train on that traffic without permission, and that it usually keeps a copy for about 30 days to check for abuse. We do not control xAI’s systems. See xAI’s security FAQ and xAI’s privacy policy.
• LightDrawer — only if you tap Stamp. We send a fingerprint of the breakdown, not the text itself. See lightdrawer.org.

Where the data goes

Cloudflare and xAI may handle data in the United States and other countries they use. If you live in the EEA or UK, that means your data may leave your country.

How long we keep it

• Sign-in codes: 10 minutes, then they stop working. We also clean out old unused codes when people request new ones.
• Signed-in sessions: up to 30 days, then they expire.
• Your account and breakdowns: while your account exists. If you delete your account, we remove your email, delete your breakdowns and share links, delete sources you submitted, and clear your name from usage and report records.
• Guest limits: the scrambled network address is for same-day limits. Older usage counts may stay for cost bookkeeping without pointing back to you.
• Abuse blocks: if an admin removes an account for abuse, that email may stay blocked from signing up again.

Cookies

• One essential sign-in cookie (fv_session) so we know you are signed in. It is HttpOnly and only used for sign-in — not for tracking.
• Cloudflare’s person check may use its own short-lived storage.
• No analytics cookies.

Share links

A page at /s/… is public to anyone with the link. Do not paste secrets or other people’s private information.

Your rights

Depending on where you live (including GDPR in the EEA), you may ask to:

• See or download your data — Account if signed in, or Requests & reports.
• Fix something wrong — use the request form.
• Delete your data — Delete my account (this also deletes your breakdowns), or the request form if you are a guest.
• Object to some uses based on fair-use / safety interests, where the law allows — use the request form.
• Complain to a data-protection authority where you live.

Children

Fairview is not for children under 16.

Requests we receive

Forms sent through Requests & reports are kept so Joe can act on them. Optional contact details are wiped 30 days after a request is marked done. Done requests are deleted after 90 days. Open requests nobody touched are deleted after 90 days.

Changes

If this page changes in a meaningful way, we will update the “Last updated” date.