# Privacy, AI System Characterization Checker

Home / Privacy

# Privacy

The controller is The Art of Service, Queensland, Australia. The free check sends nothing. A completed reading writes its actions to the plan in local storage on your device. An account is created only when you buy, and it holds the email you paid with.

## What we collect and why

If you only read the site: the hosting provider processes standard request logs, including the IP address and the page requested, to serve the page and protect the service. Cloudflare Web Analytics also records aggregate page views through a cookieless beacon. The lawful basis is our legitimate interest in running a secure service and understanding which pages are read. We do not add an advertising tracker and we do not sell data.

If you buy: Stripe processes the payment and returns the email address and subscription state. We store the email, the plan and the entitlement in our account database so that sign-in and the kit download work. The lawful basis is performance of the contract. We do not see or store your card number.

If you start the watch: we store the subscription state and send the change email to the account address. The lawful basis is performance of the contract. Cancelling the plan ends the email.

If you write to support: we keep the message and the reply so that the thread can be answered. The lawful basis is our legitimate interest in supporting the product.

## How long we keep it

Request logs are kept by the hosting provider for its standard short retention period. An account record is kept while the account is open and for 24 months after the last purchase, so that a refund or a tax query can be answered. A support thread is kept for 24 months. You can ask for earlier deletion, subject to records we must keep by law.

## Who processes it

The site is served by Cloudflare Pages (global edge), and Cloudflare Web Analytics provides the aggregate page view count. The account database is hosted by Supabase in the Sydney region. Payments are processed by Stripe. Transactional email is sent through ElasticEmail. Each provider processes data under its own terms, only for the purpose above. Where a provider processes data outside your country, the transfer relies on that provider's standard contractual clauses.

## Cookies and local storage

On your first page view we set a first-party cookie named va, with a one year lifetime, so that an anonymous visit and a later sign-up can be joined without an advertising identifier. It is HttpOnly, SameSite=Lax and Secure. Cloudflare may set a short-lived cf_clearance cookie when its bot protection challenges a request. The plan page and a completed free check use local storage under the key iso42102.plan.v1. The free check makes no network call with your answers.

## Your choices

Write to support@theartofservice.com to ask for a copy of the account data, to correct it or to delete it. A deletion removes the account record; it does not cancel a live subscription, which is cancelled from the account page or through Stripe. You may also complain to the Office of the Australian Information Commissioner, or to the data protection regulator where you live.

## Children

The product is a business tool and is not directed at children.

## Changes

If this statement changes, the change date at the foot of the page changes with it.

Last updated: 2026-10-22

Source: https://iso-42102-revision-checker.theartofservice.com/privacy/