Privacy Policy
Last Updated: 2 November 2026 Effective Date: 2 November 2026
1. Who we are
The AI Years is a publication operated by MobileByteSensei, an independent software studio founded in 2024 and based in India. This policy covers the website at theaiyears.com ("this site"), where we publish writing about work, money and life in the age of AI.
The AI Years is also published on Medium at medium.com/the-ai-years. Medium's own privacy policy governs your use of Medium.
Contact: mobilebytesensei@gmail.com
2. The short version
This site collects as little as it can.
There is no account, no login, no comment system, no contact form and no advertising. We use Google Analytics to count visits — and only after you agree to it in the cookie banner. If you decline, or ignore the banner, no analytics runs and no analytics cookie is set. We do not sell data and do not build a profile of you.
3. What we collect
| Data | Purpose | Legal basis (GDPR) | Where it is stored | Retention |
|---|---|---|---|---|
| Anonymised usage statistics (pages viewed, approximate country, device type, referring site) — only with your consent | Understanding which stories are read | Consent (Art. 6(1)(a)) | Google Analytics | Google Analytics default (14 months) |
We operate no database, no server-side application and no user records relating to this site.
3.1 Analytics (Google Analytics 4)
Analytics loads only after you choose Accept in the cookie banner. It runs with IP anonymisation enabled and with Google's advertising features (ad storage, ad personalisation, ad user data) denied. It records page views and a few events — following an outbound link, expanding a question — so we can tell which writing is useful.
Google acts as our processor for this data. Its handling is governed by https://policies.google.com/privacy. You can withdraw consent at any time by clearing this site's data in your browser; the banner will then ask again.
3.2 What our hosting provider processes
This site is served by Cloudflare Pages. Like every web host, Cloudflare automatically processes limited technical data to deliver pages and protect against attack:
| Data | Purpose | Legal basis (GDPR) | Controller |
|---|---|---|---|
| IP address | Routing the response, abuse and DDoS protection | Legitimate interests (Art. 6(1)(f)) — operating a secure website | Cloudflare |
| Browser user-agent, requested URL, timestamp | Delivering the correct page, security logging | Legitimate interests (Art. 6(1)(f)) | Cloudflare |
We do not receive, query, export or retain these logs. Cloudflare's handling is governed by https://www.cloudflare.com/privacypolicy/
3.3 Local storage on your device
Two small values are saved in your browser's localStorage, never sent to us, and never used
for tracking:
theme—lightordark, if you use the theme toggle.cc— your answer to the cookie banner, so it does not ask again on every page.
Clearing your browser's site data removes both.
4. Third parties
| Party | Role | What they process |
|---|---|---|
| Cloudflare | Hosting and CDN | Technical request data, as in §3.2 |
| Google (Analytics) | Analytics processor — only with your consent | Usage statistics, as in §3.1 |
There are no advertising networks, data brokers, social widgets or tag managers on this site. If that ever changes — for example if we add advertising — this policy will be updated before it goes live, and anything that needs your consent will ask for it.
Stories link to other websites. Following a link takes you to a site we do not control.
5. Sharing and selling
We do not sell your personal information. We do not engage in "sharing" for cross-context behavioural advertising as defined by the CPRA.
6. Your rights
European Economic Area and United Kingdom (GDPR / UK GDPR). You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. You may lodge a complaint with your supervisory authority — for EEA residents see https://edpb.europa.eu/about-edpb/board/members_en; for UK residents the ICO at https://ico.org.uk/make-a-complaint/
California (CCPA / CPRA). You have the right to know, delete and correct personal information, to opt out of its sale or sharing, and not to be discriminated against for using these rights. We do not sell or share personal information.
Canada (PIPEDA), Brazil (LGPD), Japan (APPI) and elsewhere. We honour the rights your local law grants. Write to us and say which law applies.
To exercise any right, email mobilebytesensei@gmail.com. There is no charge.
7. Children
This site is written for adults and is not directed to children. We do not knowingly collect personal information from children under 13 (COPPA), under 16 (GDPR Art. 8) or any other age threshold your jurisdiction sets. If you believe a child has provided us personal information, contact us and we will act on it promptly.
8. International transfers
Cloudflare and Google operate global networks, so your request (and, with consent, analytics data) may be processed outside your country under their own safeguards.
9. Security
This site is served only over HTTPS. It is static: there is no database, no login and no server-side code holding visitor data.
10. Changes to this policy
If this site's data practices change, we will update this policy and the Last Updated date before the change goes live, and describe material changes plainly.
11. Contact
Email: mobilebytesensei@gmail.com Studio: MobileByteSensei, India