Stigmery
Open the appOpen

Stigmery / Privacy

Privacy

Stigmery is a free tool by AI voor Impact (KvK 96624132), which is responsible for the data described here. This page says what Stigmery stores, why, for how long, where, who else receives it, and how you delete it. Questions: info@aivoorimpact.nl.

Using Stigmery without an account

You can build and run models without signing in. The simulation runs in your browser. A model you have not saved stays in your browser and is not stored by us. When you ask the AI copilot, the conversation and the model it works on do pass through our server to OpenAI (see below).

What we store

If you sign in

  • Your email address and display name (the name is optional), to send you a one-time sign-in link and to recognise your account. Kept until you delete your account.
  • The models you save, with the AI chat you had about each model and your folders. They are private unless you switch a model to public; a public model can be opened, run and forked by anyone with its link and is listed in our sitemap. Whoever opens it also receives your display name, your account id (derived from your email address, see below), the name of the folder it is in and when it was created and last changed, but not your AI conversation, which only you can read. Kept until you delete the model or your account.
  • A session cookie, stigmery_session, that keeps you signed in. It is needed for signing in, is not used for tracking, and lasts 30 days or until you sign out.

Whether or not you sign in

  • An anonymous id, a random value kept in your browser's local storage, and usage events that carry it, together with a random id for each time you open the page: that the app was opened (and whether you were signed in), a model was loaded, set up, saved or shared (with the saved model's id, whether it is private or public, and how many agent types and rules it has), a tab was switched, how long a prompt to the AI was (not its text), and the first 120 characters of an error message shown to you. If you are signed in the events also carry your account id, which is derived from your email address and is the same every time you sign in with it. They hold no prompts and no rules, but an error message can contain a name from your model or the start of a file you tried to import. We use them to see how the tool is used and to fix problems. Events are deleted automatically after 90 days.
  • Technical request logs of our hosting: the address of each request, the page that linked to it, your browser's user agent (its name and version), your IP address and the time. Google Cloud Logging keeps them in its global storage and deletes them after 30 days, its default. A sign-in link carries no readable email address. We use them to keep the service running and safe.
  • Counters in the server's memory that limit how often one sender can use the AI, the sign-in, saving and usage events. They are keyed by your IP address, the email address a sign-in link is asked for, your anonymous id or your account id, and are gone within about an hour.

Stigmery sets no advertising or tracking cookies and has no cookie banner. Your theme choice, the width of the AI panel and whether you have seen the welcome card are kept in your browser's local storage.

Who else receives data

  • OpenAI receives what you ask the AI copilot, together with the model you are working on and the earlier messages of the conversation, so it can answer. Our server sends it with our own key; OpenAI does not see your email address. According to OpenAI's page on API data (read 25 October 2026), data sent through the API is not used to train its models unless the customer opts in, and abuse-monitoring logs are kept up to 30 days. Data is processed under OpenAI's own terms and regions; we have not set a data residency region, so it may be processed outside the EU. Do not put personal data in your prompts or models.
  • Resend sends the sign-in email, so it receives your email address and the link. Its privacy policy (read 25 October 2026) says data may be processed in the United States.
  • Google Cloud hosts Stigmery (Cloud Run and Firestore, region europe-west4, the Netherlands). The database and the service are there; the request logs are kept by Google Cloud Logging in its global storage, so not only in the Netherlands.

The rule editor's files (Monaco) are served from stigmery.com itself, not from a third party. The page fonts are too.

Deleting your data

Signed in, open your account (the round button with your initials at the right of the top bar) and choose Delete account. This permanently deletes your account, your email address and all your saved models with their chats, and signs you out. You can delete a single model in the library. Usage events are not deleted with your account: if you were signed in, they still carry your account id (derived from your email address, as above), and they keep the error messages described above. They disappear by themselves within 90 days. Email us if you want them removed sooner. Our database has a daily backup that is kept for 7 days, so deleted data and expired events stay in that backup for up to 7 days more. To see, correct or remove other data, or to ask anything else, email info@aivoorimpact.nl. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).