What is stored on the server
- Your account. Email address, and the name, firm and username you supply at sign-up. Authentication is handled by Supabase. Passwords are stored only as salted hashes — they are never held in readable form and cannot be shown to you or to us. A forgotten password is replaced, never recovered.
- Your plan and query count. The plan you are on and a running count of queries used, so the monthly allowance can be metered. What is recorded is that a query happened, not what it said.
- A device identifier. Derived by hashing a random value your browser generates, so that reusing the same browser counts as the same device against your plan's device limit. It is a hash, and it identifies a browser rather than a person.
What is not stored on the server
- Your conversations. Question and answer history is held in your own browser's local storage. It is not uploaded, not stored in our database, and not readable by us. Clearing your browser storage deletes it permanently — which also means it does not follow you to another device.
- The text of your queries. The usage meter records a count, not content.
- Payment card details. These are never handled by this site.
Processing your questions
Answering a question requires sending it to the AI model provider that generates the response, together with the statutory sections and judgments retrieved for it. This transmission is what produces the answer; it is not used to advertise to you, and your questions are not sold.
Judgment and statute retrieval runs against our own mirrored index and against the courts' published sources. Those requests carry the search terms, not your identity.
Transactional email — sign-up confirmation and password reset — is sent through Resend. Delivery and bounce events are recorded so that undeliverable addresses can be detected. No marketing email is sent to members who have not asked for it.
Cookies and local storage
The site sets no advertising or third-party tracking cookies. Browser storage is used for the session token that keeps you signed in, your device seed, your saved conversations and your interface preferences. All of it is readable and clearable from your own browser.
Your control
- See or correct your details — from Settings in the app, or by writing to support@failegal.site.
- Delete your conversations — clear them in the app, or clear your browser storage.
- Delete your account — write to support@failegal.site and the account and its profile row are removed. Conversations need no deletion request; they were never ours to delete.
Security
The site is served over HTTPS with HSTS, and carries a Content-Security-Policy restricting where scripts, styles and connections may originate. Access to member data is governed by Supabase row-level security, so one member's record cannot be read with another member's session.
Changes
Material changes to this page will be reflected here with an updated date. Questions about any of the above go to support@failegal.site.