Privacy claims should describe behavior that can be tested

What the site does now

The keepsake page reads a text or ZIP export you choose and can save HTML or PDF on that device. It does not upload the chat. A daily save count stored in this browser contains only the date and a number, not the conversation. The sample controls only change fictional page content. Research collection never receives chat files, message text, or attachment names. In local preview mode, questionnaire validation stays in the page and disappears on refresh.

What an enabled research study collects

An explicitly enabled study receives bounded coded answers about use case, prior attempts, feature priorities and hypothetical pricing, plus coarse first-party funnel events. Optional email uses separate consent and storage. A private deletion code removes the coded response and email; an email-free consent audit remains for its stated period.

Research answers remain until the observation window is frozen and for up to 30 days afterward, with a 12-month hard maximum. Optional email remains for at most 90 days. Abuse fingerprints expire after 24 hours and contain no raw IP address.

What Threadkeep should never request for research

Research does not need a chat file, message text, participant name, phone number, WhatsApp login, filename or media attachment. A future product endpoint must also refuse chat content because processing is planned for the device.