Privacy Policy

WhatHeThinks is built to minimize how much of your conversation leaves your device. This policy explains exactly what happens to your data. The short version: your full chat export never leaves your device, but statistics and up to 120 redacted excerpts are sent to create and support your report. You can delete the stored report data at any time.

What happens on your device

When you upload or paste a chat, it is read, parsed and analyzed inside your web browser. The full conversation is never sent to our servers. Participant names stay on your device — the analysis only uses “You” and “Him”.

What we store

• Statistics about the chat — for example message counts, reply times, who started conversations, weekly trends and the turning points we detected.
• Up to 120 example messages, each shortened to 300 characters, used as evidence in your report. Before they leave your device, names, email addresses, phone numbers and links are replaced.
• The question you chose and, if you wrote one, your custom question.
• Your email address, if you pay (so we can send your report link) or leave a follow-up question.
• Optional account details — your email address, name, and, if you use Google sign-in, your Google account identifier and profile image. If you use a password, we store a salted password hash, never the password itself.
• Sign-in and password-reset records — short-lived reset tokens and account sessions. The tokens stored in our database are hashed and expire automatically.
• Basic usage events — such as “preview viewed” or “checkout started” — with no chat content, to understand how the product is used.

Your report is protected by a private key that is part of your report link. We store only a scrambled (hashed) version of that key, so we can't reconstruct your link from our database. Your browser also saves the key locally so you can reopen the report.

How long we keep it

• Example messages are deleted automatically 30 days after your report is created.
• Your report's statistics and findings are kept until you delete the report.
• Account sessions expire after 30 days. Password-reset links expire after one hour and work once.
• Payment records (amount, date and payment reference) are kept as required for accounting. They contain no chat content.

Sharing is your choice

Reports are private by default. You can download an image or explicitly publish a selected summary. The summary contains a general finding and, if you choose, two statistics. It never includes names, message excerpts, dates, or your private report key. Anyone with the summary link can view it for 30 days. Revoke it from the report at any time; deleting the report or account also removes the summary. Images already saved and previews cached by other services cannot be recalled.

We use an anonymous session identifier in browser session storage to connect basic product events, referral sources and campaign labels. These events do not contain messages, questions you write, or private report keys. Downloading a card does not tell us whether you sent it to anyone.

What we never do

• We never sell your data.
• We never use your data for advertising or share it with advertisers.
• WhatHeThinks does not train its own AI models on your chat or report.
• We never log the content of your messages.

Service providers

We use a small number of providers to run the service:

• Cloudflare — hosting, database and Turnstile security checks that help prevent automated abuse.
• Stripe — payments. Your card details go directly to Stripe; we never see them.
• Google — optional account sign-in. Google receives the information needed to complete the sign-in flow, and we receive your verified email and basic profile details.
• Resend — sending report links and password-reset emails.

International data transfers

Cloudflare, Stripe, Google and Resend may process data in countries other than the one where you live. Those countries may have different data-protection rules. Contact privacy@whathethinks.com if you want more information about where your data is processed or the safeguards that apply.

Deleting your data

If you have an account, use My account to review and delete individual reports or delete the account and its stored report data. If you used WhatHeThinks without an account, you can still delete a report from its page or on the private-link deletion page. Deletion is permanent.

Cookies and local storage

We don't use advertising or tracking cookies. Your browser's local storage is used to remember the key to your report on this device. If you sign in, we use a secure, HTTP-only session cookie. Google sign-in briefly uses state and nonce cookies to complete the sign-in securely. Cloudflare Turnstile may process standard network and security signals to distinguish people from automated requests.

Age

WhatHeThinks is intended for people aged 18 and over.

Changes and contact

If we change how we handle data, we'll update this page and the date above. Questions or requests: privacy@whathethinks.com.