Privacy

What this site stores

• Your order: the URLs, the platform, your notes, and the consent boxes you ticked.
• Your email address, if Stripe gives it to this site with your payment. This site uses it to send you email notices, and for nothing else.
• A record that a notice was sent: the kind and the order or subscription id. It holds no address and no link.
• Your messages in your thread.
• A hash of your private link. The database does not store the link itself.

Who sees it

• The operator and the AI agents that work on your order see your order details.
• AI orders: your repository, the page content at your URL, and your notes go to Anthropic's Claude model. The operator's machine sends them through Claude Code. The agents have no shell.
• Your tests run in a container with no network, on the operator's machine. The step that installs your dependencies runs first, in a container, with network access.
• A live review is public. Viewers of the live stream see what is on screen. The stream is public, recorded, and stays replayable on the channel archive.
• A published post shows the review text. It does not show your URL or your notes.
• Stripe handles payments. Stripe also gets your private link, as the address that it sends you back to after payment. Cloudflare runs this site and the human check. Request logs that show the link are turned off.
• Resend sends the email notices for SigmaShake. It gets your email address and the notice, which holds your private link.

Email notices

This site sends these emails and no others: your private order link and what happens next, after payment; the report or the pull request is ready; the operator replied in your thread; your subscription started, with your subscriber link. It sends no marketing email and no digest. The email holds your private link, so keep it private. Do not reply to a notice. Use your private link to write to the operator.

How long

• Order content (your URLs, notes, report, patch, and pull request link): 90 days after the order ends. The site then erases it.
• The order record, its thread, the Stripe event ids, and the records of sent notices: 730 days (24 months) after the order ends.
• A published post: it keeps its own copy of the review text. The 90-day erase does not remove it. It stays on the site until its order record is deleted, 730 days (24 months) after the order ends. Ask in your order thread to remove it earlier.
• A subscription and its thread: 365 days (12 months) after the subscription ends.
• A tip that was paid or refunded: 730 days (24 months). A tip that nobody paid: 30 days.

The site erases these automatically. You do not need to ask. You can ask for an earlier deletion. See Deletion below.

Cookies

This site sets one cookie, only_sub, only when you press the Remember button on your subscriber page. It holds your subscriber token so the full posts open. Each visit to this site renews it for 30 days. Press Forget this browser on this site to delete it, or delete it in your browser settings, at any time. The operator sign-in uses the accounts.sigmashake.com session cookie.

Deletion

Write in your message thread to ask for deletion of your order data. You have no link, or you only tipped? Ask in the chat of the live stream. The stream is not always live. If it is offline, ask again when the next stream starts. Say what you want deleted. Do not post private details.