Privacy Policy.
I believe in transparency. Here is what I collect, why, who else handles it, and what you can do about it.
Who this covers.
Arachnida Apps is built and run by one person, Alexander Rodriguez (theWebCrawler). “I” and “me” below mean me; “the Service” means this site, your Arachnida account, and the apps that use it, including Portia.
Some apps have their own privacy policy for what is particular to them, which adds to this one: Jay and Hexis.
Your Arachnida account.
One account signs you in to every app. It holds your name, username, email address, profile picture (if you add one), which plan you are on, and the agreements and permissions you have given, such as accepting these policies or turning on AI features.
For your security I keep a record of sign-ins and security events (such as a password change), including the IP address and time of your last sign-in. Your profile picture, username and display name are visible to other people by default; you can hide each of them under Profile Visibility on your account's Security & Privacy page.
Sign-in runs on my own server; no outside company provides it. Emails about your account, such as a username reminder, are sent through Resend.
Visits and server logs.
Like most web servers, mine logs each request to any Arachnida site: your IP address, the site and page requested, the time, the referring page and your browser's user agent. These logs are kept for 14 days, to keep the Service running and to spot abuse.
From those logs I keep a count of visits across the Arachnida sites to see what people use. Each visit record holds the site, page, date, response status, referring page, browser user agent and country, plus a scrambled stand-in for your IP address (a one-way hash that changes every day), so I can count visitors without storing who they are. These records are kept without a set time limit.
Blog pages also count their own views: each record is only the page and the date.
I don't run advertising, and I don't use third-party analytics or tracking.
Cookies, and nothing more.
Cookies keep you signed in across the Arachnida apps and remember choices you make. They are not used for advertising or to follow you around the web. Some apps also keep small preferences in your browser's own storage (for example, how fast your device can run Portia's voice), which never leaves your device.
Portia and AI features.
AI features are off until you turn them on in your account. Turning them on means:
- What goes to Anthropic. What you send Portia, and what it writes back, is processed by Anthropic, the company that makes the Claude models, under its commercial terms. That includes files you attach, your custom instructions, your memories, and anything Portia reads from a connected app to answer you. Anthropic deletes it within 30 days and does not use it to train its models; if a conversation is flagged as breaking Anthropic's usage policy, it may be kept for up to two years. When Portia searches the web or reads a page for you, Anthropic does that too.
- What I keep. Your chats (including every version of a message you edit or retry), files you attach, silks Portia makes, your custom instructions, an unsent draft of your next message, and your voice settings, so you can come back to them. You can delete any chat, set chats to delete themselves after a period without use (pinned chats are kept), and everything goes when your account does.
- Memories. Portia remembers things you tell it, to help in later chats. You can see, change and delete each memory, undo one as it is saved, or switch memory off in Settings.
- Private chatsare never saved: they are held in my server's memory only while you have them open and are gone shortly after you leave, and they don't use or create memories. They still go to Anthropic as above.
- Usage.For each request I record its cost and size (not its content) to apply your plan's allowance. These records stay when you delete a chat, and when you delete your account they are kept with nothing linking them to you.
- Spiderlings.If you make a Spiderling, its instructions and knowledge files are stored and sent to Anthropic whenever someone chats with it. If you chat with someone else's Spiderling, your chats are yours: its creator can't see them.
Links you share.
You can make a public link to a chat, or to a silk. Anyone with the link can open it, without an account. A chat link shows the chat as it was when you made the link and, only if you choose, the files and silks in it. A silk link shows one version of that silk at arachnidasilk.com, a separate address kept apart from your account for safety, marked as made with Portia.
Links are kept out of search engines, count their views, can be set to expire, and stop working the moment you revoke them. Anyone you share a link with could still copy what it shows.
Apps you connect.
You can let Portia read your data in another Arachnida app, so it can answer questions about it. Nothing is connected until you do it yourself, in Portia's settings.
- Jay(budgeting): you approve the connection on Jay's own page. Portia can then read your budgets, spending, pots and what's coming up, but not change anything. The key that lets it do so is stored encrypted.
- Hexis(personality): Portia can read your own results, how they changed, and your guess about yourself, never your guesses about other people or anyone else's results.
What Portia reads goes to Anthropic to answer you, like the rest of the chat. Spiderlings never get access. You can disconnect at any time, and deleting your account revokes Portia's access too.
Voice stays on your device.
Reading aloud, dictation and live conversation run entirely in your browser. Your voice is never stored or sent anywhere; only the words it is turned into are sent, exactly as if you had typed them. The first time you use voice, your browser downloads the voice models from Portia's own server, not from a third party.
Paying for a plan.
AI features are free during the beta. If you subscribe to a paid plan, Lemon Squeezyhandles the payment as the seller of record, including your card and billing details and any tax information. I receive your subscription's status, not your card details.
Where it lives, and how it goes.
Everything above is stored on my own server, in Oracle Cloud. Databases are backed up every night; backups are kept on the server for 30 days and copied to Backblaze in case the server is lost. Older offsite copies are currently kept longer than 30 days.
You can delete your account from your account page, straight away or after a 30-day grace period in which you can change your mind. Deleting it deletes your data in every Arachnida app, including your Portia chats, memories, files, silks, Spiderlings and links. Copies already in backups are not edited; they go when those backups are deleted.
I never sell your data or share it with anyone except the companies named above, which handle it only to provide the Service, or where the law requires it.
When this changes.
When I change this policy, I update the date at the top. For a significant change, I'll ask you to accept the new version when you next sign in.
Get in touch.
If you have any questions about this Privacy Policy, or want a copy of your data, you can reach me through the about page.