Privacy

Hearside is operated by StandOnIt. For privacy requests or questions, write to olena@standonit.lu.

With someone

Optional names and your progress through the exercise are kept in this browser tab's storage. They are not sent to Hearside. There is no microphone or recording in this mode.

Browsers that restore sessions may bring this tab storage back, so don't rely on it disappearing when you close the tab.

With AI

When you submit your answer, your words are sent to Google Gemini through Lovable so it can write a response.

Voice is optional. A recording stays on your device until you submit your answer. It is then sent for transcription and combined with any typed words as one answer.

Hearside does not write your conversation text or audio to its application database. The provider's processing may happen outside the EU, and we can't promise how long the provider keeps or logs it. Please leave out names and other details that identify you or anyone else.

Session counts and ratings

When a conversation starts, Hearside stores a random session identifier, the type of conversation and timestamps. When it ends, it stores the status, the ending you chose and whether retelling was skipped. Optional check-out ratings (like “Did this help?”) are saved against that session.

These records contain no names, stories or recordings. They are separate from website analytics.

Security

Session credentials are stored as hashes in our database. This browser tab keeps the credentials needed to continue your session. Requests are rate-limited using a hashed value derived from your IP address. The private results dashboard is restricted to the signed-in, verified owner on an allowlist. Hosting and infrastructure providers process operational data needed to run the site.

Website analytics

Website analytics is turned off. Our hosting platform, Lovable, offers visitor analytics such as visits, page views, traffic sources, device types and approximate countries; we have switched it off for this site. The conversation counts and optional ratings described above are separate and unchanged. See Lovable's analytics documentation and Lovable's privacy policy.

Cookies and browser storage

This site sets two infrastructure cookies. __cf_bm is a bot-protection cookie from Cloudflare (see Cloudflare's cookie documentation). __dpl is issued by the hosting platform, lasts about 24 hours, and is set even with JavaScript turned off. We have not confirmed the exact purpose of __dpl with our hosting provider.

This browser tab stores your optional names, exercise progress and temporary session credentials so the exercise can run. Names and exercise progress stay in this browser tab. Temporary session credentials are also sent to Hearside when needed to authorize requests and prevent duplicate submissions.

How long records are kept

During this pilot, session and rating records have no automatic deletion schedule. Session credentials expire, but that does not delete the records.

For privacy requests, contact olena@standonit.lu. Because records hold no names or conversation content, we may not be able to tell which record is yours.