/ 01

Who we are

VerdictKit is operated by Steven Leung, an individual operator based in mainland China. Contact: [email protected]. This is an independent, unofficial Jev playground, not a TypeSafe AI service.

/ 02

What we collect

Account: Google sign-in supplies an OAuth identity. We use the stable Google account ID and display name for a signed session. Google may include an email address in its token, but the usage database does not save it. We do not collect passwords.

Usage: we store an account or random guest ID, UTC date and run count. Short-lived queue tickets manage concurrent requests. Hosting and security providers may process IP addresses and request metadata; the app does not write IP addresses to its usage database. Analytics: with your permission, Google Analytics measures page visits, sessions, approximate location and browser or device details using a first-party identifier. We do not send the text or JSON you enter in the playground as Analytics events.

Run content: we process the state and typed questions you submit. Free runs are not saved as history. With paid access, successful paid runs are saved with their state, questions and result; judges you choose to save are stored separately. Billing records include checkout IDs, orders, subscriptions, customer IDs, plans and event status. We do not store card numbers.

/ 03

What happens to what you paste in

Your state and questions leave our server when you request a live decision. They go to OpenRouter, which routes the model request, and TypeSafe AI, which runs Jev. Do not submit anything you are not permitted to share with third parties, especially another person’s health records, personal data or confidential business information. We do not use runs to train a model. Review each processor’s own policy for its handling of API inputs. Preset demo previews do not send your input to the model.

/ 04

Who we share data with

ProviderPurposeData involved
GoogleSign-inOAuth identity and session exchange
OpenRouterModel gatewayLive state and questions
TypeSafe AIJev model providerLive state and questions
CloudflareWebsite hosting, D1 storage, Turnstile and securityAccount or guest ID, run counts, saved content, queue ticket, challenge, IP and request metadata
Waffo Pancake or CreemThe active payment provider for your purchaseCheckout and billing details entered with the provider; we do not receive card numbers
Google AnalyticsOptional site usage measurement after consentPage visits, session and device information, approximate location and cookie identifier

Google Analytics is optional and can be declined or changed using Analytics settings in the footer. We do not sell personal information or share it for cross-site advertising.

/ 05

Cookies

Essential signed cookies support guest identity and Google sign-in. With your permission, Google Analytics uses optional cookies. Your analytics choice is saved in local storage and can be changed from the footer. See the Cookies Policy for details.

/ 06

Retention

The account session cookie lasts up to seven days, the guest cookie up to one year and the OAuth state cookie up to ten minutes. The usage database keeps the current UTC day and seven previous UTC days of account or guest IDs and run counts. Older usage rows are deleted during free access requests and a daily maintenance run. Queue tickets are deleted when a run finishes; abandoned or expired tickets are cleaned up automatically. Free run inputs and answers are not saved as history. Saved judges, batch records and paid run history remain until you delete them or request account data deletion; the account page offers judge deletion, history deletion and CSV export. Billing and webhook records are kept as needed for payment operations, accounting, fraud prevention and legal obligations. You may request deletion of eligible data by emailing support.

/ 07

Your rights

You may ask to access, correct or delete data we hold about you, or object to processing, by emailing [email protected]. Applicable rights and exceptions depend on your location. We aim to respond within three business days. Signing out clears the account cookie; clearing cookies alone does not remove server-side usage records.

/ 08

International transfers

Google, Cloudflare, OpenRouter and TypeSafe AI may process data outside your country. Their own privacy notices describe relevant locations and safeguards. Review these transfers before submitting sensitive information.

/ 09

Security

Model and OAuth secrets remain server-side. Identity cookies are signed, HTTP-only and Secure on HTTPS. Turnstile protects live requests. No system is perfectly secure.

/ 10

Children

The service is not directed to children. A person below the age needed to consent to online services in their location should not create an account or submit personal data.

/ 11

Changes to this policy

We will update the date above when this policy changes and give appropriate notice before material changes to active payment or data practices.

/ 12

Contact

Privacy and support requests: [email protected]. We aim to respond within three business days.