Privacy Policy
Status: Initial policy — pending lawyer review. Not yet legally binding.
Last updated · 2026-05-11
Who we are
Stormbraining is operated by the solo founder (Sponsor) of the project. Contact: privacy@stormbrainings.com.
What we collect
- Submitted ideas. When you use Stormbraining, the idea text you submit is processed to generate the panel evaluation.
- Payment data. When you buy credits, your payment details (card number, expiry, billing address) are collected by Stripe, Inc.on Stripe's own checkout page — they never touch our servers. We receive only a Stripe Checkout Session ID, the amount paid, and a non-sensitive customer reference.
- Email addresses. Only if you contact us (e.g. to request a refund). We do not require an account to use Stormbraining.
- Technical data. IP address (hashed for rate limiting), user agent, and request timestamps. Used for abuse prevention and aggregate operational metrics.
- Credit token.An HMAC-signed token stored in your browser's localStorage. Represents the panel runs you have purchased. Contains no personal data — just the credit count and a reference to the Stripe session that issued it.
How submitted ideas are processed
- Submitted ideas are sent to Anthropic, PBC (the operator of the Claude API) for evaluation. Anthropic acts as our processor.
- Ideas are not used to train any AI model. Anthropic's API does not train on customer inputs by default; we do not opt in to any data-sharing arrangement that would change this.
- We do not currently store submitted ideas server-side — they are processed in-memory during the panel run and then discarded. Your browser keeps the rendered panel results in memory for as long as the tab is open.
Sub-processors
| Provider | Purpose | Region |
|---|---|---|
| Anthropic, PBC | LLM API for panel evaluation | US (data not used for training) |
| Stripe, Inc. | Payment processing (PCI-DSS compliant) | US (EU customer data routed through Stripe's EU entity) |
| Vercel | Hosting | EU edge |
| GitHub | Source code + CI | US |
Cookies
Stormbraining does not set tracking cookies. Browser localStorage is used to remember your language preference, your credit balance, and (optionally) your own Anthropic API key if you set one for testing. These do not leave your browser unless you make a panel-run request, in which case the credit token is sent to our server for validation.
Your rights (GDPR)
If you are in the EU/EEA, you have the right to access, rectify, delete, restrict processing of, port, and object to processing of your personal data. Contact privacy@stormbrainings.com.
For payment-related data held by Stripe, see Stripe's privacy policy at stripe.com/privacy.
Children
Stormbraining is not intended for users under 16.
Changes
We will update this policy from time to time. Material changes will be announced on the home page.