UPDATED 1 NOVEMBER 2026
Your messages
When you send a message, Psychevus receives your name, email address, message, and permission to reply. This information is used to read and respond to your message. Please avoid including passwords, confidential client records, or sensitive personal information.
To make retries safe, the application keeps a temporary submission reference and a keyed fingerprint of the message. This prevents a repeated network request from creating duplicate messages. These records stay private and become eligible for removal during administrator maintenance after expiry.
Messages are stored in Supabase PostgreSQL in Ireland and are accessible through the authenticated owner administration area. Submissions are not automatically emailed to third parties or used to train an AI model.
A private copy from the previous storage system may remain in Vercel Blob in the United States for migration and recovery. Uploaded website images continue to use Vercel Blob.
Private owner tools
AI tools are restricted to the authenticated website owner. If used, published website content can be sent through Vercel AI Gateway to OpenAI. Visitor messages and private enquiries are excluded from that context.
AI providers and the gateway may process owner requests under their service terms. The public contact form sends messages directly to the private inbox.
Storage on your device
Your privacy preference is saved in local storage under psychevus_privacy_v1, and requested again after 180 days. The contact form does not save your name, email, or message to browser storage.
Administrators use an essential, HTTP-only session cookie named psychevus_admin, which expires after eight hours. Access keys remain in the administrator’s browser; only cryptographic proof of ownership is sent for verification. Passkey sign-in uses your device’s credential system; only a public key and verification metadata are stored. A separate essential challenge cookie expires after two minutes. Session records retain a coarse browser and platform label so the owner can recognize and revoke a session.
Optional analytics
Vercel Web Analytics loads only after you allow analytics. It records page visits to help us understand which content is useful. Query strings and URL fragments are stripped before events are sent. Contact form values are not sent to analytics. Use “Privacy choices” in the footer to withdraw or change your choice. With the same permission, the application also collects LCP, INP, and CLS performance values into daily aggregate counts for a small fixed set of page sections. Signed-in owner visits are excluded. These samples contain no visitor ID, page URL, or form values. Aggregates are excluded from reporting after 30 days and removed during administrator maintenance.
Technical and abuse prevention data
Our hosting provider processes technical request data to deliver and protect the website. The application uses a keyed hash of a network address for bounded submission and sign-in limits. Raw IP addresses are not stored in the enquiry record. Rate-limit records are kept separately from messages.
Private security activity records become eligible for removal after ninety days. Application diagnostics contain coarse event categories, timing and random correlation references, without message contents or session credentials. Hosting providers have their own operational log retention.
Retention and your requests
Messages remain in my private inbox until I remove them. Archiving an enquiry changes its workflow status; it does not erase its contents. Content revision history preserves published website text, not enquiry data. Hosting-provider operational retention may also apply.
Private recovery copies may retain data until those copies are retired. Operational exports containing private records are encrypted and kept separately from public website assets.
You can request access, correction, or removal of an enquiry by using the contact form. Include your original reference if available. We will verify the request before disclosing or changing any private information.
Service providers
Vercel provides hosting, private storage, and optional analytics. See Vercel’s privacy notice for information about its processing.