Privacy Policy

Effective Date: August 25, 2026
Last Updated: August 25, 2026

This Privacy Policy explains how kryptosbot.com (the “Site”), operated by Colin Patrick under the name KryptosBot, handles information. It is incorporated into the Terms of Use; where the two conflict on a personal-information question, this Policy controls.

The Site is an independent, non-commercial research archive. It has no user accounts, no login, and no newsletter. It does not ask for your name, email address, postal address, or phone number, and there is nowhere on the Site to provide them.

1. What the Site Collects

1.1 Technical request records

Like any website, the Site records routine technical information for every request, generated automatically by the content delivery network and web application firewall that serve it. These records may include your Internet Protocol (IP) address, user-agent string, browser and operating-system information, approximate country as determined by the network provider, the URL requested, the referring URL, HTTP status codes, timestamps, and request volume.

These records are used to operate and secure the Site, to distinguish human visitors from automated scanners, to diagnose faults, and to investigate abuse. A very large share of requests to this Site are automated vulnerability scans, and separating those from real readers is a routine operational necessity.

1.2 Analytics

The Site uses Google Analytics 4 to understand aggregate readership: how many people visit, which pages they read, roughly where in the world they are, what kind of device and browser they use, and how they found the Site. Google Analytics sets first-party cookies or similar identifiers in your browser and processes data on Google’s infrastructure as our service provider.

We do not send names, email addresses, or account identifiers to Google Analytics, because the Site does not have them.

1.3 Advertising

The Site may display advertising supplied by Google AdSense in order to offset hosting costs.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this Site or other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this Site and other sites on the Internet.
• You may opt out of personalised advertising by visiting Google Ads Settings. You may opt out of some third-party vendors’ use of cookies for personalised advertising at aboutads.info/choices.
• Third-party advertising vendors set their own cookies and are governed by their own privacy policies, which we do not control.

Some pages of this Site never carry advertising. Pages that reproduce archival or third-party source imagery, including the archive, are served without ads. Those materials are presented for non-commercial research, scholarship, and commentary, and running advertising alongside them would be inconsistent with that basis.

1.4 Theory submissions

If you voluntarily submit a theory through the submission form, the Site records the text you submitted, the time of submission, a randomly generated status token, and a one-way SHA-256 hash of your IP address. The hash is used solely for rate limiting; the Site does not store your raw IP address alongside your submission and cannot reverse the hash to recover it.

Submissions are stored in a private database that is not published. Submitting is entirely optional; reading the Site requires no submission.

1.5 Challenge attempts

If you use the interactive challenge, the Site records attempt and solve counts for operational purposes.

2. Automated Processing of Submissions

This is the disclosure most likely to matter to you, so it has its own section.

The text of a theory you submit is transmitted to Anthropic, PBC and processed by a Claude language model in order to classify it, compare it against previously tested hypotheses, and generate a response. Do not submit anything you are unwilling to have processed by a third-party artificial-intelligence service.

When a submission is classified as novel, a short preview of its text is also delivered to the operator as a push notification through the third-party service ntfy.sh.

Automated classification can be wrong. A response generated by the Site is not acceptance, validation, rejection, or official verification of a theory.

3. What the Site Does Not Do

• It does not sell personal information.
• It does not collect names, email addresses, or telephone numbers.
• It does not create user accounts or profiles.
• It does not knowingly collect information from children under 13, and is not directed to children.
• It does not accept file uploads.
• It does not use analytics or advertising identifiers to attempt to identify an individual reader.

4. Cookies and Similar Technologies

The Site itself does not require cookies to function; you can read every page with cookies disabled. Cookies and similar identifiers on the Site come from the analytics and, where shown, advertising services described above. You can block or delete cookies through your browser settings. Blocking them may affect how advertising is selected but will not prevent you from reading the Site.

5. Where Information Goes

Information described in this Policy may be processed by the following categories of service provider:

• Cloud hosting, content delivery, and security — Amazon Web Services, which serves the Site and produces the technical request records described in section 1.1.
• Analytics — Google, as described in section 1.2.
• Advertising — Google and its advertising partners, as described in section 1.3.
• Automated classification — Anthropic, as described in section 2, for submitted theory text only.
• Operator notifications — ntfy.sh, as described in section 2, for submission previews only.

Information may also be disclosed where required by law, or to establish, exercise, or defend legal claims.

These providers operate internationally, including in the United States. Using the Site involves transferring information to the United States.

6. Retention

Security and firewall request logs are retained on a rolling basis for approximately 90 days. Analytics data is retained according to the retention period configured in Google Analytics. Theory submissions and their associated hashed rate-limiting records are retained for as long as the research archive is maintained, because they form part of the record of what has been tested.

7. Your Choices

• Analytics: install the Google Analytics opt-out browser add-on, or block the analytics script with a content blocker.
• Advertising: use the opt-out links in section 1.3.
• Submissions: simply do not submit. Reading requires nothing.
• Deletion: if you submitted a theory and want it removed, contact us with the status token you were given, which is the only way to identify your submission. Without it we cannot locate your record, because we hold nothing else that identifies you.

Depending on where you live, you may have additional rights over personal information, such as access, correction, deletion, or objection. Contact us to exercise them. Note that for most visitors the Site holds no information capable of identifying you.

8. Security

The Site is served over HTTPS, is fronted by a web application firewall, and stores runtime secrets outside its source code. No system is perfectly secure, and no method of transmission or storage can be guaranteed.

9. Changes

This Policy may be updated. Material changes will be reflected in the “Last Updated” date above. Continued use of the Site after a change constitutes acceptance of the updated Policy.

10. Contact

Questions about this Policy may be sent to contact@kryptosbot.com.