The AI Reckoning Back to aireckon.ing

aireckon.ing

Privacy and research

What this site keeps about you, who can see it, how long it stays, and what your rights are. It also says plainly where the planned doctoral research stands today.

Last updated 4 October 2026.

The short version

Who we are

The controller, meaning the one responsible for your personal data on aireckon.ing, is fiveinnolabs (Victor del Rosal), in Ireland.

Contact: [email protected]. Victor reads this inbox himself and is the person responsible for data protection here.

What we collect

Everything in the rooms is optional. If you skip a room, nothing else changes. "Victor" below means he can read it with your name attached, in an owner view or in the database.

WhatWhenWho can see it
Your account: name, email, profile photo, sign-in method (Google, LinkedIn or an email link)When you sign inYou and Victor. Held by Google Firebase.
A record of each sign-in: time, method, name, emailEach time you sign inVictor
Your XP: what earned it and when; your AI Badge level; who invited you and whom you invitedAs you use the siteYou and Victor
Your reckoning moment: one sentence and, if you want, a longer tellingIf you answerYou and Victor. Not public.
Survey "What do you want from AI?": 20 multiple-choice answers, no free textIf you take partTotals are public; a question's breakdown stays hidden until 5 people have answered it. Your own answers are not shown on the site; Victor can access them in the database.
Five Innovators: your answers and your mapIf you take itYou and Victor
CV comparison: your five scores, up to 15 short lines quoted from your CV, and one paragraph. The CV itself is not stored.If you import a CVYou and Victor
Connect: what would make meeting people worth it, cities, whom you'd like to meetIf you answerYou and Victor. Not public.
Your Twelve check-in: whether your group met, how many came, how it felt (1 to 5), a short note. The names in your Twelve plan stay in your browser and never reach us.If you use itYou and Victor
Thoughts on slides and The Ask: what you write, the feeling you pick, your first name, initial and photoIf you postPublic, to anyone, signed in or not
Leo, the AI guide: your messagesIf you chatNot stored on our server. The chat stays in your browser tab until you close it. We count how many messages you send each day.
Your confirmed email address, and your choice about the Reckoning letter (the exact wording you saw, its version and the time)If you confirm your emailYou and Victor. Never shown to other members.
Page visits: time, page, device type, browser, operating system, whether it looks like a bot, and the approximate country, region, city and time zone our host estimates. Linked to your account if you are signed in, unless your browser sends Global Privacy Control. We don't store your IP address, your full browser string, your exact location or the page you came from.When you open the home page or a deckVictor, including which members visited, with city, device and browser
Other rooms: Summit RSVP, topic votes and suggestions, slide downloads (name and email), merch vote (design, size, email), XP quest notes, TOWNHALL reading progress, your sidebar layoutWhen you use themVictor. Vote totals are public.
Weather in the top bar: an approximate location from our host, rounded to about 10 km, or a city you typeWhen the home page loadsKept in your browser. The forecast comes from Open-Meteo.

At live talks, the QR name bubbles run as a separate tool with its own note on the join page. If you tick to get the slides there, Victor keeps your Google name and email in a contact list (a Google Sheet) to send them and stay in touch, until you ask him to remove them.

Why, and the legal reason

Data protection law asks us to name a legal reason (a "lawful basis") for each use.

WhyLegal reason
To give you an account and the rooms you use, and keep you signed inContract: it is needed to provide what you asked for (GDPR Art 6(1)(b))
To keep what you choose to write or answer in the rooms, and to send the Reckoning letter if you ticked for itConsent (Art 6(1)(a)). You can withdraw it at any time by deleting the answer or emailing us; that does not undo what was done before.
To keep sign-in records and visit logs, see how the site is used, keep it secure, and check public posts before they appearLegitimate interests (Art 6(1)(f)): running the site safely and well. You can object, and we will stop unless we have a strong reason that outweighs yours.

Sensitive information

Some rooms ask how AI makes you feel, and a few survey questions ask your views on regulation and public services. Answers about feelings, beliefs, politics or health can be sensitive under the law.

The PhD research Discovery phase

Victor del Rosal is exploring a possible doctoral research question, broadly: what does it mean to be human in the age of superintelligence? That reaches beyond feelings about AI to how people think, decide, work and relate alongside machines that may outthink them, and how they stay coherent, capable and genuinely themselves while using them. The exact question is not decided, and neither are the university and its research ethics committee. The words "Part of pre-doctoral research" on the home page refer to this plan.

Where it stands today:

This page will be updated, with the date, before anything changes.

AI on this site

The AI models on this site are Meta's open Llama models, run by Cloudflare (Workers AI), which already hosts the site. No other AI company receives what you type.

Leo, the site guide

Leo is an AI assistant, not a person. What you type goes to Llama 3.3 on Cloudflare to write the reply. We don't store the conversation on our server; it stays in your browser tab until you close it. Leo can be wrong. Leo is not a counsellor: if you are struggling, please use the support lines below.

The CV comparison

Your PDF is read in your browser (the PDF reader loads from cdnjs, a Cloudflare service). Only its text, up to 20,000 characters, is sent once to Llama 3.3 on Cloudflare to compare with your Five Innovators answers. We keep your scores, up to 15 short lines quoted from the CV, and one paragraph. The CV text is not stored. "Remove CV reading" deletes what we kept.

Public posts

Thoughts on slides and answers to The Ask are checked by AI safety models on Cloudflare (Llama Guard 3 and Llama 3.3) before they appear. A post can be held back. Held-back posts are visible only to Victor, and you can ask him to look again.

Who else handles data

These companies process data for us to run the site.

WhoWhat they getWhere
Cloudflare (hosting, database, storage, AI models)Everything the site stores; every visitor's connection; the text of public posts, CVs and Leo messages for AI processing; the approximate location used for the weather and the visit logUS company. Our database sits in Cloudflare's Western Europe region; it is not formally locked to the EU. Where AI processing runs is not fixed to the EU.
Google FirebaseYour account: name, email, photo, sign-in method and times; sign-in link emailsUS company
LinkedInThat you signed in with LinkedIn, if you do. LinkedIn sends us your name, email, photo and member ID.LinkedIn
Resend (email)Your email address, confirmation codes, the Reckoning letterUS company; stores data in the US
Google SheetsName and email of people at live talks who tick to get the slidesUS company
Supabase (Victor's victordelrosal.com)Your account ID and a comment ID, to give XP for comments thereWe are checking where this is stored
Victor's other sites (AI Badge, xd.vdr.me, space5.app)Your account ID, to check XPRun by Victor

Services your browser contacts directly

Some parts of a page load from other services. Each of them sees your IP address and browser when it loads.

Transfers outside the EU

Cloudflare, Google and Resend are US companies, so some data goes to the US. Resend states that its transfers rely on the EU's Standard Contractual Clauses, with the EU-US Data Privacy Framework as an additional mechanism. For Cloudflare and Google we rely on their standard data processing terms; we are still checking and filing each agreement, and will name the exact safeguard here once that is done. You can ask us for a copy of what applies.

How long we keep it

WhatHow long
Page visits13 months. The clean-up runs automatically as new visits come in, so a record can stay a little longer.
Sign-in cookie30 days
Email confirmation codesThey stop working after 15 minutes
Leo conversationNot stored on our server; in your browser tab until you close it
CV textNot stored; read once
Your Twelve plan names, weather cityOnly in your browser, until you clear it
BackupsAn encrypted copy of the site's data is made every night and kept for 30 days, plus one copy a month kept for 12 months, so nothing is lost if something breaks. Something you delete leaves the backups as they roll off, within at most 12 months. Backups are encrypted with a key held only by Victor and are never used for anything else.
Counts of which rooms are used13 months, as daily totals with no name attached
Everything elseKept while your account is open. Delete it any time with the room's Delete button, or by emailing [email protected]. If you ask us to close your account, we delete what we hold about you.

We have not yet set fixed periods for everything else. When we do, they will be listed here.

Which parts of the site are used

How we see which parts of the site are used. To decide what to build next, aireckon.ing counts, for each day, how often each room is opened, how long it stays on screen while the tab is visible, which room people move to next, how far down the home page and Today in AI people scroll, and how often a few named buttons are clicked (such as "Reserve mine" or starting the survey). This counting is done by our own site, with no outside analytics company, no cookies and nothing stored in your browser. We do not store your IP address, we do not fingerprint your device, and the counts do not name you. If you are signed in, we count you once per room per day using a code made from your account ID and a random value that is deleted at the end of that day, so one day cannot be linked to the next and the code cannot be traced back to you; only the daily total is kept. If your browser sends Do Not Track or Global Privacy Control, nothing is counted at all. Known bots are left out. The totals are kept for 13 months and only Victor can see them.

Your rights, and how to use them

You have the right to:

How

Complaints

Please tell us first, at [email protected], so we can put it right. You always have the right to complain to Ireland's Data Protection Commission:

Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963
www.dataprotection.ie

If you live elsewhere in the EU, you can also complain to the regulator where you live, and you have the right to go to court.

Age

You must be 16 or over to make an account. We don't check ages automatically yet, so we ask you to tell us the truth. If we learn that an account belongs to someone under 16, we will delete it. Any future research will be open only to people aged 18 or over.

Automated processing

Both are for your own reflection. Nobody uses them to make decisions about you, and nothing on this site makes decisions about you that have legal or similarly significant effects. The AI that checks public posts can hold a post back; you can ask Victor to review it.

Cookies and browser storage

NameWhat it is forHow long
rk_s (cookie)Keeps you signed in. Page scripts cannot read it.30 days
LinkedIn sign-in cookieProtects the LinkedIn sign-in step10 minutes
Firebase (browser storage)Your sign-in stateUntil you sign out
aireckon-wxYour weather city and rounded locationUntil you clear it
rk-twelveThe names in your Your Twelve plan; never sent to usUntil you clear it
rk-leo (tab storage)Your conversation with LeoUntil you close the tab
rk-email, rk-refYour email during an email-link sign-in; an invite codeThe email is removed once used
Display preferencesTheme, font, volume, layout, what you have seenUntil you clear it

We set no advertising or analytics cookies. YouTube may set its own when a video plays on Reckoning TV.

Keeping it safe

The site is served only over HTTPS. Your session cookie is signed and cannot be read by page scripts. Owner views need Victor's own account. If a breach is likely to put your rights at risk, we will tell the Data Protection Commission within 72 hours of finding out, and tell you directly where the law requires.

If thinking about AI feels heavy

aireckon.ing is not a support service, and nobody reads answers here in real time. If AI, work, the news or anything else is weighing on you, these services in Ireland are free and confidential:

Changes to this page

When this page changes, the date below changes too. If a change affects something you agreed to, we will ask you again rather than assume.

Last updated 4 October 2026.