Privacy — anonymous AI model discovery analytics
We use no analytics cookies, accounts or visitor IDs. Anonymous event totals help us see which pages, finder results and access links are useful. Do Not Track and Global Privacy Control disable those counters.
Exactly what is counted
The browser sends page_view (page type), finder_started, finder_completed (model), cta_view and cta_click (model, page type, placement). If a blind test is available, it also sends blind_test_played and blind_test_answered. Page paths are allowlisted; URL query strings, prompts and free text are not collected.
The redirect service counts model, placement and referrer host bucket only. Known referrers use their host; unrecognized hosts become “other.” MCP calls are counted by tool and a small client-name allowlist. These are events, not unique people or proven sales.
What is not stored
The analytics dataset contains no IP addresses, device fingerprints, user agents, full referrer URLs, precise locations or cross-site identifiers. Request addresses are used transiently for abuse protection: an in-memory keyed digest expires with the short rate-limit window and is never written into the aggregate files.
Do Not Track (DNT: 1) and Global Privacy Control (Sec-GPC: 1) suppress both browser and service counters. The finder runs locally without sending your answers to the API. Its share link contains only the selected task and small answer enums.
Storage and retention
Daily aggregate JSON files are held on our server for up to 400 days. A protected summary endpoint requires a bearer token; the read-only model API is public. No advertising or third-party analytics scripts load on this site.
Your browser and the hosting server still process ordinary network requests to deliver the site and apply security protections. External services have their own privacy terms when you follow a link. Higgsfield may use referral cookies on its domain; we do not control its consent choice.
Official Higgsfield posters and previews load directly from cdn.higgsfield.ai using anonymous cross-origin media requests. That CDN processes the network request. Motion is disabled for reduced-motion and data-saving preferences; on mobile the home previews start only when requested. The official YouTube example loads its iframe from youtube-nocookie.com only after you click Play; YouTube then processes requests under its own terms.
Contact
For a privacy request, use hello@whatsthatmodel.com. The mailbox is not yet verified; this limitation is also stated on our contact page.