PHP
Server-side includes, metadata, structured data, security headers, and the project-facts endpoint.
Privacy and technology
No Trackers. No Accounts. No Retained Age Profile.
The public site is intentionally simple: PHP renders the pages, local CSS styles them, and local JavaScript powers campaign interactions, the prompt builder, and the persona chooser. Persona files are streamed only after a request-scoped 18+ self-attestation.
Direct answer
What personal information does the application retain?
None by design. The site has no account system, analytics, advertising, payment processing, tracking pixels, third-party scripts, prompt API, or database. The persona download endpoint receives only an artifact choice and an 18+ self-attestation for the current response; the application does not retain either value.
Technology inventory
The boring stack is the feature.
HTML
Semantic documents, forms, headings, links, details elements, tables, and accessible landmarks.
CSS
Local stylesheets with responsive layouts, focus states, print rules, and reduced-motion support.
JavaScript
Local scripts for navigation, dialogs, campaign jokes, prompt tools, persona downloads, and user-initiated sharing.
Not used
No third-party runtime dependencies.
- No JavaScript framework or CSS framework
- No content-delivery network or external web font
- No analytics, ad network, session replay, or fingerprinting
- No model, search, answer-engine, or social API
- No cookies, local storage, indexed database, or service worker
- No account, email, address, political preference, payment, identity-document, or birth-date field
Hosting caveat
The server operator may have infrastructure logs.
Although the application does not create analytics or prompt logs, a web host may keep standard request records such as IP address, timestamp, URL, response status, and user agent. The package cannot describe a hosting provider’s retention policy because no provider has been selected.
A deployer should update this page with verified hosting-log details before making a stronger claim.
Persona downloads
The 18+ check is a transient self-attestation.
The checkbox is required because the persona and reference artwork use adult-oriented vice themes involving alcohol, cigars, gambling, and criminal comedy. It is not identity verification.
What reaches the server
- The approved artifact ID or ZIP/JSON selection
- Whether the optional Safety derivative was selected
- The value
age-confirm=1for the current request - No name, date of birth, ID document, account, cookie, or session
- No application-side persistence after the file response
As with every page request, the hosting provider may independently record ordinary infrastructure data such as IP address, timestamp, URL, status, and user agent.
Interactive pages
Your text stays in the page.
The AI Speech Boundary Lab constructs a prompt in browser memory. The fake pledge generator constructs a joke response in browser memory. Neither feature has a network destination.
How to erase the inputs
- Use the page’s reset button.
- Reload or close the page.
- Because no persistence is used, there is no stored application record to delete.
Sharing posters and pages
The sharing panel keeps caption edits in the current page only. It does not save them to a database or send them to this site's server. Preparing image sharing fetches a public JPG from this same site; the usual hosting request logs may apply.
Copy controls write only the text you select to your clipboard, with a manual-copy fallback. Choosing native Share sends the displayed caption, link, and/or image to the destination you select. Platform links open an external composer; Facebook receives the shared URL, while the X, Bluesky, and WhatsApp links can include the caption and hashtags in the URL. Those services handle the resulting drafts and posts under their own policies. There is no social tracking pixel, embedded SDK, account connection, or automatic publishing.
Direct contact and external links
The contact page publishes Mike’s public email, phone number, website, and profile links. It has no submission form. Email and phone links open your chosen application; a message you choose to send is handled outside this website by you, the recipient, and the relevant communications providers. Visiting an external profile is subject to that site’s own policies.
Security headers
PHP sends a content security policy that limits scripts, styles, images, forms, connections, frames, objects, and powerful browser capabilities to the local site. It also sends referrer, content-type, frame, opener, and permissions headers. Hosting software may add or override headers, so production deployment should verify the final response.
Policy changes
This privacy description was updated on 2026-09-13. If a future version adds analytics, accounts, storage, external services, or form processing, the privacy page and machine-readable project facts must be updated before deployment.
