Privacy Policy.

Effective: 29 August 2026 · Version 1.0

The short version.

This site was built to know as little about you as possible. No accounts, no cookies, no analytics, no trackers, no ads. Reading is anonymous. Two features send what you type to an AI model – the Manifest guide and the companion – and this page lists, completely, what leaves your device where, and what is stored for how long.

1. Who is responsible.

The controller for the processing described here is the operator of thewayofcreation.com, based in Switzerland. For privacy matters, use the contact address on the About page. Personal data is processed in accordance with the Swiss Federal Act on Data Protection (FADP) and, for visitors in the EU/EEA, the GDPR.

2. The website.

The site is hosted on Google Firebase Hosting (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). When you visit, Google processes technical access data (IP address, time, requested URL, user agent) in server logs to deliver the site and keep it secure. Legal basis: our legitimate interest in operating the website (Art. 6(1)(f) GDPR). Transfers to Google LLC in the USA are covered by the EU–US and Swiss–US Data Privacy Frameworks.

The site itself sets no cookies and uses no analytics or tracking – which is also why there is no cookie banner. Fonts are served from this site, not from a third party. The light/dark theme follows your system setting and is not stored.

One optional feature uses your browser's local storage: marking texts as read. That progress is saved only on your device, only when you use the feature, and is never transmitted anywhere.

3. The Manifest guide.

When you use the Manifest guide, the text you enter (your intention, and the blockages you select) is sent to our server functions in Zurich, Switzerland (Google Cloud, region europe-west6) and from there to the AI model that generates the responses. The model runs on an Azure OpenAI endpoint in the EU, reached via OpenRouter, Inc. (USA) as routing provider. The request is pinned to that EU endpoint: your input is not used to train models and is not retained there (zero data retention).

We store nothing: your input and the generated responses exist only for the duration of the request. Nothing you type in the guide is linked to you – there is no account and we do not record who asked what. Legal basis: the processing is necessary to provide the feature you are actively using (Art. 6(1)(b) GDPR).

4. The companion (Telegram).

The companion is a chat conversation on Telegram, currently accessible by invitation. Telegram itself is an independent service with its own privacy policy; note that Telegram bot chats are not end-to-end encrypted.

When you talk with the companion, we process: your Telegram user id, first name, username and language (to run your account); your messages (to generate replies); and usage counters per account (cost and token counts – never the content of what you wrote).

Conversations are deleted by default. A conversation is kept only while it is open, so the companion remembers the context, and is deleted when it ends – when you send /new, delete it with /delete, or stay away for a few hours. Exception: if you attach feedback with /feedback, the conversation is saved together with your notes and exported to the operator to improve the companion.

Replies are generated over the same model chain as the Manifest guide: an Azure OpenAI endpoint in the EU, reached via OpenRouter, pinned so that your words are not used for training and are not retained by the model provider.

Invitations: every user has a personal invite link. If you join through one, we record which account invited you, and the inviting person is notified with your Telegram first name. The operator is notified as well – that is how access is managed while the companion is invite-only.

Consent and deletion: before your first conversation you are asked to agree to this policy and the terms; the time of your consent is stored. You can delete the current conversation at any time with /delete, and your entire account – conversations (including those saved with feedback), usage counters, your invite link, consent record – with /delete_account. One exception, so deletion cannot be used to sidestep the free allowance: the current month's usage total (a cost figure, never content) is kept after account deletion and expires at the end of the month. For feedback conversations already exported, use the contact address on the About page and they will be deleted as well.

5. Donations.

The donation links on this site lead to external services (Buy Me a Coffee, DonationAlerts). If you follow them, those services process your data under their own privacy policies – nothing about your visit there flows back to this site.

6. What is deliberately not done.

No accounts on the website. No analytics, no advertising, no tracking of any kind. No sale or sharing of data. No profiles of readers. The AI features work without knowing who you are beyond what is described above.

7. Retention.

Website: nothing is stored about you beyond the hosting provider's standard server logs. Manifest guide: nothing is stored. Companion: open conversations only until they end (a few hours at most, unless you keep writing); conversations saved with /feedback until they have served their purpose or you ask for deletion; usage counters and account data until you delete your account – except the current month's usage total, which expires at the end of the month (it keeps a deleted-and-returning account within the same free allowance).

8. Your rights.

Under the FADP and (where it applies) the GDPR you have the rights of access, rectification, erasure, restriction, data portability, and objection, and the right to complain to a supervisory authority – in Switzerland the FDPIC, in the EU/EEA your local data-protection authority. The fastest paths to erasure are the companion's own commands (/delete, /delete_account); for everything else, use the contact address on the About page.

9. Changes.

If a feature ever gains a data flow not listed here, this policy is updated first, and companion users are asked for fresh consent where it concerns them. The complete-list promise above is the point of this document.