Privacy on this site
Document version 1.3.0 ·
The data controller is My Attention AI, Inc., a Delaware corporation (EIN 35-2933575), at 1111B S Governors Ave STE 80709, Dover, DE 19904, US. Questions about data: team@myattention.co.
This site records nothing in your browser until you say it may, and asks the first time you arrive. Server-side records are kept either way. This notice states what each of those is, where it sits, how long it lives and what is deliberately excluded.
Who is responsible
My Attention AI, Inc. owns this site and decides what is processed on it and why.
Postal correspondence may be sent to the registered address above. Data questions and rights requests may be sent to team@myattention.co; the route to a supervisory authority remains available regardless.
No data protection officer is appointed. Questions and rights requests are handled through team@myattention.co.
Browser telemetry and Session Replay
Not until you accept. A banner asks on your first visit and the recorder is held in its refusing state until you answer — declining is remembered, and so is accepting, so you are asked once rather than on every page.
That is a property of the code rather than a promise in this paragraph. The recorder takes the consent answer as a required input with no default, and an unanswered question is a refusal on every path through it. Your answer is kept in your own browser, not in a cookie sent to us, and you can change it at any time.
Under a grant — here or, inside the products, under a current product-analytics consent — it records page content, interactions, console, network, errors, performance and browser/device details. Passwords, reusable tokens, OAuth codes, private keys, recovery codes, full card numbers and CVV are excluded whatever the consent says.
What the web server records, and why
One exception, and every website has it. The server records each request: IP address, date and time, method and path, response code, response size, referrer and browser string. An IP address counts as personal data, so the rest of this section is the detail that owes you.
Why: to see that the server is working, to investigate failures, and to notice automated probing. The lawful basis is our legitimate interest in keeping the site available and secure. We take the view that these records do not override your interests: they are not linked to an identity, not enriched, and not used for anything except running the site.
There is no automated decision-making affecting visitors, and no profiling.
How long it is kept
RUM, Replay, technical logs, product events and traces are kept for 30 days. Metrics are kept for 90 days and security/audit records for 365 days.
These periods are configured on the OpenObserve streams that hold the records rather than depending on a rotating file's size.
Where it sits, and who else is involved
The server is physically in Amsterdam, in a DigitalOcean data centre — inside the European Economic Area. DigitalOcean acts as processor and provides the infrastructure.
Let's Encrypt issues the certificate that secures the connection; that uses the domain name and nothing else.
OpenTelemetry Collector and OpenObserve are self-hosted here. No advertising network receives this data and it is not sold.
The company is incorporated in the United States, so the server may be reached from outside the EEA. We state that as a fact; we do not offer a legal assessment of it here.
Technical telemetry
The application reports on its own work: which route it rendered, by which method, with which response code, and how long it took. That is enough to notice it degrading.
Those records include IP address, browser/device details, route and query metadata, request/response details, errors and release identity. They are joined to an account only where somebody is signed in to a product and has given product-analytics consent; a visit to this site is neither.
Your rights
In respect of data processed about you, you may ask for access to it, for its correction or erasure, for processing to be restricted, and you may object to processing based on legitimate interest.
A visit to this site can be located by IP address and period, which is what the server holds. After sign-in to a product, and under a product-analytics consent, telemetry is also linked to the account and can be located through that identity.
You may also lodge a complaint with the data protection supervisory authority where you live or work.
Who this site is for
The service is open to everyone. No age is asked for and none is enforced, here or in the products.
The questionnaire's questions and their wording were written for adults and have not been tested with children. That is a statement about what has been tested, not a rule about who may use it.
If this text changes
The date at the top is the day this last described the site accurately. It lives in the same repository as the page itself, so every change is an edit with a history rather than a new file replacing the old one.
Product data
Screen processes questionnaire answers, notes, timings, scoring and AI reports under the separate Screen privacy notice.
Together processes task and check-in data, matching and attendance, media quality, access and settlement. Every human session records separate participant audio tracks after the versioned pre-join notice. Raw audio is deleted no later than seven days after transcription.
Together transcripts are private by default. A shared transcript is created only when both participants selected it before the session. Transcripts and summaries are included in account export and deletion.
What Screen holds is described in a separate notice — Screen privacy — published on this site and likewise marked provisional. That is the document somebody is shown when they create an account, and its version is the one recorded at that moment. This paragraph used to report that document as absent; it is published now, and the record names it.
About enquiries, once more
There is no public address yet. One will appear here, and until it does the route to a supervisory authority is the one that works.