Cookie notice

This website sets no cookies. It runs no analytics, carries no advertising, embeds no video, loads no chat widget and shows no consent banner. Nothing it does writes to your browser's cookie store, local storage or session storage.

That is unusual enough that a one line claim is not worth much on its own, so the rest of this notice sets out what the pages actually do, what leaves your browser as a result, the one third party request that is made and why, and what would have to change if Andy is ever released.

A cookie is a small piece of text a website asks your browser to store and send back on later requests. Cookies are how a site remembers that you are signed in, what is in a basket, or that you have already dismissed a message. They are also how an advertising network recognises the same browser across unrelated sites, which is the use that gave them their reputation.

Local storage and session storage do a similar job with a different mechanism, and a site that avoids cookies while writing an identifier into local storage has not actually changed anything. Fingerprinting goes further again, building an identifier out of the characteristics of your device without storing anything at all.

The relevant statement is therefore not "we use no cookies" but "we store no identifier by any means and attempt no fingerprinting". That is the statement we are making. Every page on this site is a static file. There is nothing behind it that could hold a session, because there is no application, no database and no account system.

No cookies does not mean no network activity. Two things genuinely leave your browser when you load a page here, and pretending otherwise would be the same evasion this notice exists to avoid.

The request for the page itself

Your browser asks our hosting provider for the file. That request necessarily carries your IP address, the address of the page you asked for, your user agent string, and the referring page if your browser chose to send one. The provider records that in a log for a short period, as every web host on the internet does, and uses it to keep the service running and to deal with abuse.

We do not copy those logs into any system of our own, we do not analyse them, and we could not tell you how many people visited this site last week. That is a real consequence of the design and we accept it.

The request for the typefaces

The pages are set in two typefaces that are served by Google Fonts. Loading a page therefore causes your browser to make a request to fonts.googleapis.com for a small stylesheet and to fonts.gstatic.com for the font files. Those requests tell Google your IP address, your user agent and the fact that a page on this domain was loaded.

Google states that the Fonts service sets no cookies and that the requests are not used for advertising or profiling. We cannot verify that from here, and you should treat it as their assurance rather than ours. What we can say is that the requests are for static files, that no script from Google runs on these pages, and that the content security policy served with every page forbids one.

What does not leave your browser

• Nothing goes to an analytics provider, because there is not one.
• Nothing goes to an advertising network, because there is not one.
• Nothing goes to a social platform. There are no share buttons, no embedded posts and no like widgets.
• Nothing goes to a content delivery network other than the host that serves the site and the font service named above.
• No form is submitted anywhere, because there is no form. Every contact route on this site is a plain link that opens your own mail application, and what happens after that is between you and your mail provider.

Australia has no direct equivalent of the European rule that requires consent before storing information on a device. There is no Australian version of the ePrivacy Directive, and the banner most Australian websites show is either aimed at European visitors or copied from a template.

What does apply is the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where a cookie or an identifier is personal information, meaning information about an identified individual or an individual who is reasonably identifiable, then collecting it engages Australian Privacy Principle 3, telling you about it engages Australian Privacy Principle 5, and holding it engages Australian Privacy Principle 11. An IP address in a server log can be personal information in the right circumstances, which is why the logs are described above rather than dismissed.

Section 6D of the Privacy Act exempts most businesses with an annual turnover of $3 million or less, and ANDY AI PTY LTD is currently below that threshold. We do not rely on the exemption. The privacy policy explains that decision in full and applies the Australian Privacy Principles as though the Act binds us.

Why there is no banner

Because there is nothing to consent to. A consent banner on a site that sets no cookies is worse than useless. It trains people to click through a dialogue that does nothing, it adds a third party script to a page that otherwise has none, and it usually sets a cookie in order to remember that you dismissed it. A site that genuinely stores nothing should look like one.

Global Privacy Control

Some browsers send a Global Privacy Control signal expressing an objection to the sale or sharing of personal information. We do not sell or share personal information and there is no advertising here, so there is nothing for the signal to switch off. It is honoured trivially, because the behaviour it asks for is the behaviour that already exists.

You do not need our cooperation to control any of this, and the controls work regardless of what any website says.

• Block or clear cookies in your browser's privacy settings. Nothing on this site will break, because nothing on this site depends on one.
• Block third party font loading with a content blocker if you would rather Google's servers did not see the request. The pages will fall back to Georgia and to your system sans serif, and everything stays legible. The layout was checked with the web fonts blocked.
• Use a private window. It changes nothing here, but it costs nothing either.
• Disable JavaScript. The one script on this site inserts the navigation menu button and fades sections in as they scroll into view. With scripting off, the navigation list is simply always visible and nothing fades. No content is hidden, on any page, in any state.
• Turn on reduced motion in your operating system. The fade is switched off entirely and content appears at full opacity immediately.

Browser vendors publish their own instructions for cookie and storage controls, and those instructions are more current than anything we could copy into this page. Look for privacy or content settings in your browser's preferences.

If Andy is released, there would have to be somewhere for a trades business to sign in, and that changes the position. We would rather set out the limits now than argue about them later.

Two commitments about that table. Nothing in it would be added quietly. This notice would be updated before the change went live, not after, and the effective date at the top of the page would move. And no third party script would be added to the marketing site, whatever happens behind a sign in page. The pages you are reading now would stay as they are.

Questions about anything on this page go to hello@andyai.link. If you think something here is inaccurate, that is worth telling us, and a correction will be made and the effective date moved.

This notice sits alongside the privacy policy, which is the fuller document and which deals with personal information generally, and the terms of use. Where this notice and the privacy policy appear to say different things, the privacy policy is the one to rely on and the discrepancy is a mistake we would want reported.

If you are not satisfied with an answer from us about privacy, you can complain to the Office of the Australian Information Commissioner (OAIC), GPO Box 5218, Sydney NSW 2001, telephone 1300 363 992, oaic.gov.au. There is no fee and you do not need our agreement.

The entity behind andyai.link is ANDY AI PTY LTD. Its details, and where to verify them on the public registers, are on the contact page.