What we store. Your email address, an encrypted (hashed) version of your password, your optional country, the optional first name you give the mediator so it can address you (stored encrypted, and clearable in Settings), an email address if you choose to give one on the save-your-conversation card (used only to send you your way-back-in link and, if you tick it, one check-in), the conversations you have with the AI (including detected sentiment and patterns), and the small facts the AI remembers to personalise its advice — all visible and deletable in Settings.
How your messages are processed. Messages are sent to OpenAI to generate responses. They are processed under OpenAI's API data policy and are not used to train their models. We never sell your data, and your conversations, account details and activity inside the app are never shared with advertisers.
Advertising measurement. Only if you accept them in the consent bar, our public pages — the homepage, the quiz, the Separate Rooms page and the login/signup page — load a Meta (Facebook) pixel and a Google Ads tag. Decline and neither ever loads; the choice is remembered in your browser and can be changed by clearing site data. With that same consent, when you sign up or send your first message our server tells Meta that it happened, together with the click id from the ad you arrived by, your IP address and browser type — so the ads can be aimed at people who use the product rather than people who tap by accident. It never includes your email, your name or anything you wrote, and it happens at most twice per account. They record a page view, and when an account is created they record that a signup happened, so we can tell which ads bring people who actually find this useful. They report that a signup occurred, never who you are or anything you wrote. Both run with automatic tracking turned off, so they only ever send the events named here. Neither loads at all on any signed-in page — not your chats, history, progress, profile, people or settings — so your conversations and everything you do after signing in stay invisible to them.
Product analytics. Separately from advertising, every page — including the signed-in ones — loads Plausible, a cookieless analytics tool. It is served through our own domain rather than a third-party script host, sets no cookies, does not follow you across other websites, and builds no profile of you. It records which pages are visited, and a short list of named product events — that a first message was sent, how many messages a conversation reached, which prompt someone tapped — so we can see where people get stuck. It never receives anything you wrote, who you wrote about, your email, or your account details, and it is never shared with advertisers.
The scenario game. Playing the scenarios at /scenarios stores nothing at all — your answers stay in your browser. If you choose to send someone a link to compare, we then store that one set: which invented scenarios were in it, and which option each of you picked. No account, no name unless you type one, and nothing about your own life — every scenario is fictional. Those shared sets are deleted automatically after 30 days.
Your rights. You can export all of your data as JSON or PDF at any time, delete individual messages, whole conversations, or any remembered fact, and permanently delete your account and all associated data from Settings.
Encryption. Your messages, the mediator's replies, remembered facts, notes, debriefs, preps and reports are encrypted at rest in our database with a key that is held separately from the database and its backups. Connections to the site are encrypted in transit (TLS). Passwords are never stored — only a bcrypt hash.
Sensitive content. Relationship conversations can be deeply personal. Treat your account credentials carefully, and use the delete tools whenever you want something gone.
Emails. We only send emails you would expect: password resets, and — solely if you switched them on — check-ins and session preps about your own conversations. Each carries a one-click unsubscribe link. There is no marketing list.
Retention. Data is kept until you delete it or your account. Backups are retained for up to 30 days.
Contact. 3rd Chair is the data controller for the information described above. For any question about your data — including access, correction, export, or erasure — email support@3rdchair.ai. If you are in the EU or UK and you are not satisfied with our response, you have the right to complain to your data protection authority; in Ireland that is the Data Protection Commission.
Last updated 5 September 2026.