Privacy
Updated 28 October 2026.
Who we are
VARIA is an independent project in preview: a decision-flow simulator for AI pipelines. This page covers heyvaria.com and its editions (/classic, /dos). Questions and requests: say@heyvaria.com.
When you send a request
The request forms keep your email address, what you typed (your flow, the volume, the fields you chose) and how each field was filled. We use it only to reply to you about your flow.
To sort the inbox, the text of a request is also scored once by a decision model (Jev by TypeSafe) for how likely it is a genuine request; the score never decides whether a request is kept.
With each request we keep a one-way digest of your IP address (it cannot be turned back into the address), the result of an invisible bot check (Vercel BotID) and how long the form was open. Requests are stored in a Redis database (Upstash) until you ask us to delete them.
When you type in the page
Text you type in the “tailor the page” bar or the FAQ search is sent to the decision model (Jev by TypeSafe) to pick the closest use case or answer. It is not stored or logged; a short-lived in-memory cache keeps only a one-way digest of it.
Rate limits count requests per network using a one-way digest of the IP address; those counters expire after two days.
Analytics
We use Google Analytics 4 to count visits and requests sent. In the EEA, the UK and Switzerland it starts without analytics cookies: Google receives cookieless measurements only. Elsewhere it sets its own first-party cookies, unless your browser sends Global Privacy Control. Advertising features are off; analytics data is kept for 14 months.
A form test stores which form version you saw in your browser (localStorage) and a random id for the current tab (sessionStorage); neither follows you across visits or sites.
We also count visits by search and AI crawlers (for example Googlebot or GPTBot) by their user-agent name; this never includes people's data.
Who processes it
Vercel (hosting, request logs, bot check), Upstash (request storage), Google (analytics) and TypeSafe (the decision model). We do not sell data and run no ads.
Your choices
Write to say@heyvaria.com to see, correct or delete what we hold about you; we delete requests on request. To browse without analytics cookies, turn on Global Privacy Control or block cookies for this site.