Privacy

Last updated 7 November 2026.

Who holds your data

Jacob's Brain is operated by Mojo Design Limited, Cyprus, which is the data controller for the account data described below.

If you want a copy of what is held about you, want it corrected, or want all of it deleted, email ops@mojodesign.io, which reaches Jacob directly. Requests are answered within a month.

What is collected, and why

• Your email address. It is the account. It is how a sign-in code reaches you and how the brain knows you on the next connection.
• Your IP address and browser user agent, once, when you first sign up. Kept to spot abuse of the sign-in endpoint.
• Your IP address with each sign-in code request. Used to rate limit, so one address cannot request unlimited codes.
• Which app you connected, and when. Claude or Cursor, for example, so the connection can be shown back to you and revoked.
• What you ask the brain. Your searches are stored against your account, with the tool used and the app that called it. Worth saying plainly, because it is the item people least expect: if you search for something, that text is kept.
• The exact newsletter wording you were shown, and the date. Stored so there is a record of what you were told, and so changing the wording later never rewrites what you actually saw.

Sign-in codes, API keys and refresh tokens are stored as hashes, never as the value itself. A copy of the database does not reveal anybody's code or token.

Analytics

The landing page loads Google Analytics through Google Tag Manager, to count visits and see which pages get read. It sets cookies, and it tells Google your IP address and which pages you opened. The site also loads its fonts from Google, which tells Google the same thing.

That is kept apart from the brain itself. Your email address, the questions you ask and the passages you are shown are never sent to it, and the analytics cannot tell who you are.

What is not collected

No advertising tags and no tracking pixels. Nothing you ask the brain is recorded for marketing, nothing is sold, and no profile of you is built or shared. The only account data that exists is from people who chose to connect.

Who it is shared with

Four providers, each acting only on instruction. Nothing is sold, and nothing is shared for anyone else's marketing.

• Cloudflare hosts the service, holds the database and keeps request logs.
• Resend sends the sign-in code emails. It receives your email address.
• Kit sends The Maker Letter. Connecting the brain adds your email address to that list, which the sign-in page tells you before it sends your code.
• Google serves the fonts and runs the analytics on the landing page. It receives your IP address and which pages you opened, and nothing from your account.

Said plainly, because it is the part people most want to know up front: connecting subscribes you. There is no separate box. Every email carries a one-click unsubscribe, you can unsubscribe the moment the first one arrives, and unsubscribing does not disconnect the brain or affect your account in any way. If you would rather never have been added, say so at the address above and you will be removed from Kit entirely.

How long it is kept

Until you ask for it to be deleted. There is no automatic deletion. Sign-in codes expire within minutes and cannot be reused after that, but the expired rows stay in the table, and your searches and connection records stay for as long as the account does. Ask, and all of it goes.

Your rights

You can ask what is held about you, ask for it to be corrected, or ask for all of it to be deleted. Deleting your account removes your connections, your keys and your search history with it. You can leave the newsletter at any time from the unsubscribe link in any email, or by asking, and that is independent of your account.

If you are in the EU or the UK and think this has been handled badly, you can complain to your data protection authority. In Cyprus that is the Office of the Commissioner for Personal Data Protection.

The content in the brain

The brain holds Jacob's own published writing, posts and videos, and nothing else. It is his material, published by him.

Other people's material is kept out when the index is built, rather than hidden behind an instruction at the point you ask. Client names and results, anything sold, and his family and private life are absent from the index, so there is nothing there for a clever prompt to surface. If you believe something about you is in there, say so at the address above and it will be removed from the index and from the published pages.

Changes

If this changes in a way that affects you, the date at the top changes with it.