Skip to content
  1. Home
  2. Privacy

Privacy: what the chat sends and stores

Graduate Chat has no accounts and never asks for your contact details. Pip still has to process what you type, so this page lists exactly what that involves.

Leave these out

When you paste a CV, resume or cover letter, remove your name, phone number, email address, street address and referees' details first. Pip does not need them. Please leave out other people's private details too, along with passwords, bank details and identity numbers.

What is stored when you chat

WhatWhereHow long
The messages you send and the replies. Each message is cut off at 2,000 characters.Our chat service's database, hosted on CloudflareDeleted within 24 hours of the conversation starting
A random conversation ID, the time, the page address you chatted from, the language, and the country your connection appears to come from (a two-letter code worked out by Cloudflare from your IP address)The same databaseDeleted with the conversation
The conversation so far and the conversation IDYour own browser tab (session storage)Until you close the tab or press "New round"
A count of messages sent today, kept against a scrambled, one-way code made from your IP address and the date, used only for the daily limitOur chat serviceAbout one day

We do not store your IP address itself with the conversation, and the chat panel does not send your browser details, the page you came from or any visitor tracking ID. The timed test sets run in your browser, and your choices are not sent anywhere unless you press the button to talk your misses through with Pip.

Who processes your messages

To write a reply, your message and the earlier messages in the same conversation are sent to an AI model provider. The chat service currently uses DeepSeek, with Alibaba Cloud's Qwen model as a fallback when DeepSeek is unavailable. Both are operated by companies based in China and process the text on their own servers under their own terms. Cloudflare hosts the website, the chat service and its database.

Who can read conversations

Conversations on this site are not forwarded to staff and nobody reviews them as they happen. They stay in the database for up to 24 hours and are then deleted automatically. During that time the people who maintain the service have technical access to the database, as with any hosted service.

What we do not collect

  • No account, name, email address or phone number. Pip is instructed not to ask for them.
  • No advertising cookies or cross-site trackers.
  • No payment details.

Fonts and images

Fonts, icons and pictures are served from this site, so your browser is not sent to a third-party font or image host.

Your choices

Press "New round" to clear the conversation from your browser at any time. Because conversations are not linked to an identity and are deleted within 24 hours, we usually cannot find a particular conversation to send or delete on request.

This page is updated when what the site does changes. Last reviewed 3 November 2026.