Privacy Policy

Last updated: September 20, 2026

This Privacy Policy explains how Cebes (“we”, “us”) collects, uses, and protects your information when you use cebes.app(the “Service”). By using the Service you agree to this policy.

Cebes is an independent project operated by Olivier Tardif, based in Calgary, Alberta, Canada. You can reach us at olileotardif@gmail.com.

Information we collect

• Account information. If you create an account, we store your email address and authentication details through our provider, Supabase.
• Conversations. When you are signed in, the messages you send and the AI responses you receive are saved to your account so your chat history is available across sessions. If you use Cebes without an account, your conversations are stored only in your own browser (localStorage) and never sent to our database.
• Usage and technical data. We collect aggregate, privacy-friendly analytics (page views and performance) through Vercel Web Analytics, which does not use tracking cookies. We also process your IP address transiently to enforce rate limits and to detect and block automated abuse.

How we use your information

• To provide the Service — generating responses and saving your history.
• To operate, secure, and improve the Service, including preventing abuse and controlling costs.
• To communicate with you about your account when necessary.

We do not sell your personal information, and we do not use your conversations to serve advertising.

Service providers we share data with

We rely on the following processors to run the Service. Your data is shared with them only to the extent needed to operate Cebes:

• Supabase — user authentication and database hosting (account and conversation storage).
• Vercel — application hosting, privacy-friendly analytics, and bot protection (BotID).
• Anthropic — generates AI responses. The messages you send in a conversation are transmitted to Anthropic to produce a reply.
• Voyage AI — generates the embeddings used to retrieve relevant historical passages for your questions.

We encourage you not to share sensitive personal information in your messages, as they are processed by these third parties.

Cookies

We use only strictly-necessary cookies — no advertising or cross-site tracking cookies. Specifically:

• Authentication cookies. When you sign in, our authentication provider (Supabase) sets session cookies so you stay logged in as you move between pages. They are marked Secure and HttpOnly where applicable and are required for signed-in features to work.
• No analytics or advertising cookies. Our usage analytics (Vercel Web Analytics) is cookieless — it sets no cookies and does not track you across other websites.

Because we set only strictly-necessary cookies, no cookie-consent banner is required. If you block cookies in your browser you will not be able to stay signed in, but you can still use Cebes as a guest, in which case your conversation history stays only in your own browser.

Data retention

We keep your account information for as long as your account is active. Your saved conversations are retained until you delete them or your account. You can delete individual conversations at any time from within the app.

Your choices and rights

• You can view and delete your conversations from within the Service.
• You may request access to, correction of, or deletion of your personal information (including full account deletion) by contacting us at olileotardif@gmail.com.
• Depending on where you live, you may have additional rights over your data — for example under Canada’s PIPEDA, the GDPR in the EU/UK, or the CCPA in California. We honor applicable requests.

Children

Cebes is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we will delete it.

Security

We take reasonable technical measures to protect your data, including transport encryption (HTTPS), database access controls that restrict each account’s data to its owner, and rate limiting. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will be made apparent within the Service.

Contact

Questions about this policy or your data? Email us at olileotardif@gmail.com.