Skip to content

Privacy

The short version.

  • You do not need an account, and most of the site never asks who you are.
  • The text you paste into the analyser is never written to our database.
  • We do not use analytics, advertising or third-party tracking of any kind.
  • Everything runs on servers in Finland, inside the EU.
  • We do not sell anything to anyone, and there is nothing here to sell.

Who is responsible

Riskoria Advising & Professional Services d.o.o., Poljačka ulica 56, 10000 Zagreb, Croatia. OIB 84611853622. The controller for anything described here, and reachable at info@riskoria.eu.

What is processed, and for how long

A message you analyse

The text is sent to Anthropic to be read by a language model, and the result comes back to you. Then it is gone. What we keep is a salted hash of the text, its length, the risk score, and which model read it — four things, none of which contains a word you wrote. The hash cannot be reversed into the message.

The analysis itself is not kept either, and that is a deliberate change. It quotes your message back to you, so keeping it would have meant keeping fragments of what you pasted — which is not what this page says, and this page is the one that has to be true.

The four remaining fields are kept 90 days, then deleted.

A practice conversation

What you write in a scenario is stored while the run is open, because the debrief is written from it. Thirty days after the run ends, the text of every message is blanked and only the structure remains: which tactic appeared at which turn, whether you caught it, and the score. We ask you not to type real details, and the system blocks anything resembling an account number, a card, a phone number or an address before it is sent anywhere.

Text removed after 30 days. The rest goes with the session at 90 days.

Your session, and the one cookie

One cookie, hos_session, holding a random value and nothing else. It exists so the site can tell one visit from another and remember your progress. It is not shared, and it is not an identifier anyone else can read. Your IP address and browser identification are stored only as salted hashes, used to stop one visitor exhausting the service for everyone.

That is the whole cookie position. There is no analytics cookie, no advertising cookie, no tag manager and no third-party script of any kind, which is why you have not been shown a consent banner: there is nothing to consent to. A strictly necessary cookie needs telling you about, and this is us telling you.

Anonymous sessions are deleted after 90 days without a visit.

An account, once they exist

Accounts are not available yet. When they are, they will hold an email address and nothing else, only if you choose to keep your progress across devices, and there will be no password: you will get a link by email. Deleting the account will delete the address and everything attached to it. This paragraph will lose its tense when that ships.

Who else sees anything

Two companies, and no others.

  • Anthropic processes the text you submit, because that is what produces the analysis and the characters. Their handling is governed by their own terms. We do not permit it to be used for training.
  • Hetzner hosts the server, in Helsinki. Nothing leaves the EU for hosting.

There is no advertising network, no analytics provider, no content delivery network and no font service. Typefaces are served from this server for exactly that reason.

What you can ask for

Access to what is held about you, correction, deletion, restriction, and a copy in a portable form. Write to info@riskoria.eu.

One honest caveat: if you have used the site without an account, we have no way to connect a request to your data, because that is precisely what the design avoids. Clearing the cookie in your browser ends the link entirely, and what remains is deleted on the schedule above.

If you are not satisfied with how we have handled something, you can complain to a data protection authority. Riskoria is established in Croatia, so ours is AZOP, but if you are in the EU or EEA you may also complain to the authority where you live.

Children

This site is written for adults and the scenarios include coercion and financial pressure. It is not intended for anyone under 16.

Last updated 30 July 2026. If this notice and the software ever disagree, the software is the defect and we will say so here when it is fixed.