Home / Privacy
What we collect.Which is almost nothing.
This site sets no cookies, runs no analytics scripts and carries no advertising. Two things send data anywhere — the contact form and the terminal. This page says exactly what each one does.
Who we are
ControllerAssembly Discovery, LLC is the controller of any personal data described on this page. We operate from Phoenix/Tucson, Arizona and Houston, Texas, and work nationwide.
We are a two-person firm. We are not required to appoint a Data Protection Officer and have not appointed one — requests reach the same two people as everything else, through the form at /contact or by phone on (520) 760-7076. Our address is HelpMeAssemble@assemblydiscovery.com.
Effective 8 September 2026
Cookies
There are noneThis site sets no cookies. Not functional ones, not analytics ones, not advertising ones. There is no consent banner because there is nothing to consent to.
The one thing we do store in your browser is session storage, which drives the chain-of-custody panel in the corner of every page. It holds three values — a random session ID, the time you arrived, and the entries shown in that panel. It is generated in your browser, never transmitted to us or anyone else, and erased the moment you close the tab.
We use no local storage, no IndexedDB, no fingerprinting, no pixels, no tag manager and no third-party trackers of any kind. We do not sell or share personal information, and never have.
The contact form
What it sends, and whereThe form at /contact sends us your name, your email address, your company if you give one, the option you picked, and your message. It reaches us as an ordinary email through our email provider. Nothing goes into a database, because we do not run one.
Your IP address is included in that email. We use it only to recognise abuse — the same address submitting repeatedly — and it goes no further than the message itself. We mention it because we would rather you read it here than discover it later.
The form also carries a hidden field a person never sees and never fills in. Automated submissions fill it in, which is how we discard them. We also limit how often one address can submit.
We use what you send to reply and to do the work you asked about. We do not add you to a mailing list, we do not run a sales sequence, and we do not pass your details to anyone not listed further down this page.
The terminal
One sentence, not storedThe demo at /terminal sends the sentence you type to Anthropic, which generates the response you see. That is the point of it — it is a live model, not a script.
We do not store what you type. Our logs record that a query ran and how many characters it was, never the text. Anthropic processes it under their own terms in order to return an answer. Do not paste anything confidential into it — not because we will misuse it, but because a public demo box is the wrong place for privileged material, and we would say the same about anyone else’s.
Everything else the site touches
Being complete about itFonts. Our typefaces are served from our own servers. Loading this page contacts nobody but us — no font CDN, no analytics host, no third-party domain of any kind.
Server logs. Our host records ordinary request data — IP address, time, page, browser — as every web server does. We use it to keep the site up and to investigate abuse.
Rate limiting. To stop the form and the terminal being flooded, we count recent requests per IP address at the network edge. That counter expires within the hour and holds nothing but a number.
Who else processes it
Three, all US-basedThree companies process data on our behalf. All are US-based, all are bound by contract to use it only for the service they provide us, and none of them advertise to you.
Cloudflare
- Hosting, content delivery, and the security layer in front of this site
- Sees: ordinary request data, including your IP address
Postmark
- Delivers the email your contact form becomes
- Sees: everything you put in the form, including your IP address
Anthropic
- Generates the response in the terminal demo
- Sees: the sentence you type there, and nothing else about you
How long we keep it
RetentionEnquiries stay in our mailbox for as long as the conversation is useful and our records need to show it happened. Ask us to delete yours and we will, unless we are required to keep it.
Terminal queries are not retained by us at all.
Server logs and rate-limit counters expire on our host’s own schedule, which is short — hours to days, not years.
If you are in the UK or EU
GDPR and UK GDPRWe are not established in the UK or EU and we do not target either market, but if you write to us from there, the UK GDPR and the EU GDPR apply to what you send. The short version:
Why we are allowed to process it. Our lawful basis is legitimate interests — replying to someone who deliberately contacted us, and keeping the site from being abused. There is no profiling and no automated decision-making.
What you can ask for. A copy of what we hold, a correction, deletion, a restriction on how we use it, a machine-readable export, or an objection to our using it at all. Ask through the form and we will action it within one month. We do not charge for this and we will not make it difficult.
Where it goes. The three processors above are in the United States, so your data is transferred there. Each publishes its own transfer terms, including the European Commission’s Standard Contractual Clauses, and we rely on those.
If we get it wrong. Tell us first — we would rather fix it. You also have the right to complain to your national supervisory authority, which in the UK is the Information Commissioner’s Office.
If you are in California
CCPAWe do not sell personal information and we do not share it for cross-context behavioural advertising. We have never done either. The categories we collect are the ones listed above — identifiers, and the contents of a message you chose to send us. You can ask us to disclose or delete them the same way as anyone else, and we will not treat you differently for asking.
Changes and questions
If this page changes in a way that matters, we will change the effective date at the top and say what moved. We will not quietly broaden it.
Questions, corrections, or a deletion request all go to the same place.