Privacy Policy
How this guestbook handles personal data.
This policy page describes how the y2k Guestbook ("the Site") handles information. The policy is written for:
- Guestbook commenters
- Visitors who interact with the Original Poetry volume
- Visitors who use the Ask the Documentation chatbot
- Google account holders who sign in as admins, who can only access the guestbook administration panel via invite
What We Collect
| Data | Who | Purpose |
|---|---|---|
| Display name & message body | Anyone who comments | Displayed in posted comments |
| Optional email | Commenters | Visible to admins only — will not be used to contact you unless requested in your comment |
| IP address (stored hashed) | Commenters | Rate-limit abuse |
| Page-view / analytics events | Visitors | Traffic & hit-counter stats |
| Google account email & basic profile | Admins signing in with Google | Authenticate allow-listed users, send admins email notifications |
| Anonymous visitor cookie (poem #) | Visitors who like poems | Count one like interaction per visitor per poem |
| Docs chat prompts & replies | Visitors who use Ask the Documentation | Answer questions from these documentation pages |
docs_chat_id cookie | Visitors who use Ask the Documentation | Resume the same-browser chat |
| IP address (stored hashed) | Visitors who use Ask the Documentation | Rate-limit docs chat (5 questions per hour, 10 per day) |
How We Use It
- Run and manage the guestbook (edit and delete comments as needed).
- Limit spam and abuse (profanity checks, rate limits).
- Restrict guestbook administration to allow-listed Google accounts.
- Send allow-listed admins email notifications for guestbook events.
- Measure visits to display hit counter / track visitor interactions with PostHog.
- Answer questions through the Ask the Documentation chatbot.
- Resume the same-browser Ask the Documentation chat and limit chat abuse.
Who Processes It
- Google Cloud OAuth Client — SSO for admins
- Google Gemini — Embeddings and generate for Ask the Documentation
- Supabase — Auth sessions, database storage, and chatbot history
- Vercel — Serves the site on the cloud
- PostHog — Analytics tracking
Retention and Deletion
- Guestbook comments (and optional emails) stay until an admin removes them or the database is cleared.
- Admin sessions use Supabase Auth (short-lived access tokens, long-lived refresh until sign-out or cookie clear).
- Admin Google account emails are stored in the admin allow-list until removed by a super-admin.
- Rate-limit keys are temporary.
- Docs chatbot messages stay in Supabase until you click Clear Chat in Ask the Documentation or clear your browser's cookies.
- Analytics retention follows the PostHog project settings.
Your Choices
- Do not submit an email if you prefer not to share one.
- Admins can sign out to end the current session — Clear site cookies to drop stored auth/visitor cookies.
- Click Clear Chat in Ask the Documentation to delete your browser's chat session, stored prompts and replies, and the related cookie.
- You can ask us to delete a comment or stored contact email you provided.
Changes
We may update this policy when the Site's features or processors change. The version on this page is the current one.