Privacy
What we collect, and what we don't.
Short version: the site itself collects nothing. If you chat with Nievah, what you type is sent to an AI model to answer you, and a hashed form of your IP address is counted so nobody can run up our bill. Nothing is sold, nothing is used to train a model, and there is no advertising or analytics anywhere on this site.
The site
No analytics, no tracking pixels, no advertising, and no cookies. Pages are served from Cloudflare, which keeps short-lived network logs for security and abuse prevention as any host does. Fonts load from Google Fonts, which means Google sees the request for the font file.
Chatting with Nievah
Nievah is an AI assistant, not a person. She is clearly labelled as one in the chat panel, and her answers can be wrong — check anything that matters against the page she links, or email us.
Nothing happens until you send a message. Opening the chat panel, reading the greeting and closing it again makes no network request at all. The widget also stores nothing on your device: no cookie, no local storage. Your conversation lives in memory for as long as the tab is open and is gone when you close it.
When you do send a message:
- Your message goes to Cloudflare Workers AI — an open-weights model running on Cloudflare's network — together with extracts of this website so the answer stays grounded in it. It is used to generate your answer and nothing else. It is not used to train any model.
- Your conversation is held for up to an hour on Cloudflare's edge so Nievah can follow the thread, then deleted automatically. We do not read it, export it, or attach it to you.
- Your IP address is hashed, never stored. It is combined with a secret and the current date and turned into a one-way hash purely to count requests. The hash changes every day, so it cannot be used to recognise you tomorrow, and the raw address is never written down.
- The first answer to a common question may be cached for up to seven days so we can answer it again without spending another model call. The cache holds the question and the answer. It never holds anything that identifies who asked.
- Cloudflare Turnstile may run a silent check that you are not a script, because an unprotected chat box is an easy way to run up somebody else's bill. It is a privacy-preserving alternative to a CAPTCHA and does not track you across sites.
Please don't type anything confidential, and don't include personal details about yourself or anyone else. It is a marketing assistant on a public website — if you need to tell us something sensitive, email us instead.
If you email hello@magmamoose.com we keep the correspondence so we can reply and keep track of the conversation. That's it.
Where it goes
Two processors, and no others: Cloudflare (hosting, the chat backend, the AI model, Turnstile) and Google Fonts (the two typefaces). Chat messages are processed on Cloudflare's global network, so they may be handled outside your country under Cloudflare's own data protection terms and standard contractual clauses. We deliberately do not route chat to any other AI provider.
Your rights
Under the GDPR and South Africa's POPIA you can ask what we hold about you, ask for it to be corrected or deleted, and object to how we use it. In practice we hold almost nothing: chat conversations expire within the hour and are not linked to a person, so there is usually nothing to retrieve. Email hello@magmamoose.com and we will answer within 30 days.
Our lawful basis for the chat and the abuse counters is legitimate interest: answering questions about our own products, and keeping the service from being abused. There is no profiling and no automated decision-making that affects you.
Changes
If this changes materially we will update this page. Magma Moose is a South African company; questions go to hello@magmamoose.com.