Privacy policy
What happens to a report.
Touchstone is a prototype that checks whether an AI-written report is backed by the pages it cites. This page describes what it does with what you paste. It is written to be read, not to hide behind.
What you send
You paste a report and the links it cites. No account is required, and the service does not ask for a name or an email address. Do not paste anything private or confidential: a prototype is not the place for it.
Who processes it
Reports are processed by the language model configured for this deployment — currently Google Gemini’s free tier. Google may use inputs sent on the free tier to improve its products. The pages the report cites are fetched directly by this service. The text of the cited pages is sent to the same model so it can check the claims; nothing is sent to anyone else.
What is kept
- On the server: nothing. Reports and results are streamed back to your browser and not written to disk. Per-address rate-limit counters live in memory for about an hour, then are pruned.
- In your browser: the app keeps up to three recent runs, your theme and a few interface sizes in local storage on your device, so the example can be replayed without spending a token. Clearing site data removes them.
- Server logs: the host may record ordinary request logs (time, status, address) to run and secure the service.
Cookies
Touchstone sets no cookies. Nothing here is used for advertising or analytics.
Your choices
You can clear the browser’s site data at any time, and you can simply not paste a report. Since there is no account, there is no profile to delete. If you believe a deployment of this prototype is handling data badly, open an issue at https://github.com/aynxitis/touchstone/issues.
Changes
This is an early prototype and the policy will change with it. The date above is the date of the last change.