Privacy.
Said as plainly as the tool.

What you type

It stays in your browser.

Your business name, the owner’s name and role, the dates, your answers and any wording you edit live in the page for as long as the tab is open. The statement is written in the page from fixed sentences. Printing is done by your browser. Nothing is sent anywhere to make any of that work.

The share link

Share puts your answers, names, dates and wording into the link itself, after the #. Browsers never send that part of a link to a website, so it does not reach us, our host or our analytics when the link is opened. Anyone you give the link to can read everything in it, and your browser history may keep it. We never see it.

The embed

Embed gives you a snippet for your own website that shows your statement in a frame. The statement travels inside the snippet, the same way a share link carries it, so it is public to anyone who visits the page you put it on, and it still never reaches us.

Rephrase: the one thing that leaves

Rephrase is optional and only runs when you press it. It sends which boxes you ticked in the six questions, and whether you gave a business name. It does not send the name itself, the owner, their role, the dates, the sector or anything you typed or edited. Our server turns those ticks back into the fixed sentences and sends them to Anthropic’s API so a model can reword them. The name is put back in your browser afterwards.

We do not log the request, store it or keep a record of it at our end. Anthropic’s commercial terms say they may not train models on it. What we cannot tell you is that it vanishes: Anthropic does not offer ad hoc deletion on API data, so the request is held on their systems for a period set by their retention policy rather than by us. Anthropic is a US company and the request is processed outside the UK. If you would rather none of that happened, do not press Rephrase; everything else works without it.

The only thing recorded about the request is a count, kept against your IP address for an hour so one visitor cannot run up a bill for everyone. That counter runs on Upstash, so your IP address reaches them for that hour. They never see your answers.

Measurement

Counted, not watched.

Statement counts visits with Vercel Web Analytics. It sets no cookies and no storage of any kind, and it has no identifier for you: a visit is counted against a hash of the request that is thrown away within the day, so we cannot tell a returning visitor from a new one, and we cannot follow anyone between our tools.

Everything after the page’s path is removed before a visit is reported, so a shared draft could not reach the analytics even if a browser sent it. Beyond visits it counts which actions happen, such as a question answered (which one, not the answer), a section copied, a print, a share, an embed copied, a rephrase or a click through to the AI Audit. No name, business name or wording is ever part of an event.

Your IP address reaches Vercel, who host Statement, as part of any request to any website, and is used for the approximate country in the visit count. We do not store it.

Statement is made by Digitopia Design Ltd, a company registered in England and Wales, number 12037302, registered office 124 City Road, London, EC1V 2NX, trading as Digitopia Labs. Our ICO registration is ZC160761.

We count visits on the basis of our legitimate interest in knowing which parts of the tool get used. The counting is done by Vercel, so it goes no further than the company already serving you the page. Vercel is a US company, so that processing happens outside the UK under the standard contractual clauses in their data processing terms.

You can ask for a copy of anything held about you (which should be nothing), ask for it to be erased, or object to the counting altogether, at hello@digitopiadesign.com. If you think we have got something on this page wrong, you can also complain to the Information Commissioner’s Office at ico.org.uk.