Privacy? On a joke website? Adorable.

You couldn't be bothered to ask Grok yourself, so we won't pretend you read privacy policies. Here's the whole thing in plain English.

Your question lives in the link

Making a link happens in your browser. Nothing gets sent to us until somebody opens it. But the question is packed right into the link itself, and that scramble is not encryption. Anyone who has the link can read the question, and so can anywhere the link ends up: chat apps, browser history, link previews, QR codes, screenshots, your group chat's least trustworthy member.

When a link gets pasted into a chat app, that app's preview bot fetches it and shows the question as the title and on a little picture card. That's the whole point of the preview, so don't put anything in a question you wouldn't want shown in big letters. Questions our filters flag as personal info, emergencies or self-harm get the plain, generic preview instead.

What happens when a link plays

When someone opens a link, their browser sends the question to our server. If it gets past the bot check, the limits and our filters, we send it to xAI's API so Grok can write the roast and the answer. Before it goes, anything that looks like an email address or phone number gets swapped for [email] or [phone]. xAI handles the question under its own privacy policy and terms, not ours. We don't send xAI anything about you: no IP, no hash, no ID.

Questions our filters catch (personal info, emergencies, prompt tricks, essay requests) get a canned reply from us and never reach xAI. Link preview bots never trigger a Grok call; only a real browser playing the link does.

What we keep, and for how long

For each question that makes it past the bot check, we log:

• the question (with emails and phone numbers already swapped for [email] and [phone]) and the answer it got
• when it was asked, and which roast level
• a rough country, as guessed by Cloudflare
• what happened to it (answered, refused, rate-limited and so on), how long it took, and how many tokens it cost
• a hashed IP for the first day only (see below)

We use this to see what people ask, keep the bill under control, and decide which questions deserve a harder roast. It shows up on a private stats page only we can see. Everything in the log is deleted automatically after 90 days.

IP addresses

We never store the raw IP. It's run through a keyed hash, and the key changes every day, so the same person gets a different scrambled string tomorrow and the days can't be linked together. That hash is used for rate limits and to count roughly how many different people showed up that day. The rate-limit counters expire within two days, and the hash is wiped from the question log after one day.

Like nearly every website, our host Cloudflare sees normal request details, IP included, as it passes traffic along. We've switched off the Worker request logging on our side, but Cloudflare's own handling is covered by its policy, linked below.

Why we're allowed to do any of this

If you're in the UK or EU, the legal basis is legitimate interest: running the site, keeping it working, and protecting it (and the API bill) from bots and abuse. That's it. We don't need your personal info for any of it and we don't want it. You're the one typing, so keeping private stuff out of the box is on you.

Where it goes

Cloudflare (which runs the site and the bot check) and xAI (which writes the answers) are both US companies, so your question may be processed in the United States and other countries where they operate, under their own transfer safeguards.

Cloudflare, doing Cloudflare things

Before a question goes to Grok, or before a removal request is accepted, Cloudflare Turnstile checks that you're probably a human. We count page views with Cloudflare Web Analytics, which doesn't use cookies. Both are covered by Cloudflare's privacy policy.

Cookies, or the lack of them

We don't set any cookies. Web Analytics is cookieless. Turnstile is a security check, and if Cloudflare sets anything during it, that's strictly necessary to stop bots, not to track you. No non-essential cookies means no cookie banner. You're welcome.

Going to grok.com, and share buttons

The “Continue in Grok” button sends you, and your question, to grok.com. The share buttons hand your link to X, WhatsApp, your texting app or your email app. After that you're in their world, under their terms and privacy policies. We can't see anything that happens there, and we're not responsible for it.

Kids

This site isn't for children under 13, or under 16 in the EU. We don't knowingly collect anything from them, and if a question from a kid lands in the log, ask us to remove it below.

Your rights, realistically

Data protection laws (GDPR, UK GDPR, California's CCPA and friends) give you rights to access, correct and delete data about you. The catch: we have no accounts and the IP hash rotates daily, so we genuinely can't tell which questions are yours. What we can do is delete a specific question. Send a removal request with the question text or its share link, and we'll wipe every matching copy from the log. Requests are checked by hand every so often, so it's not instant. If you leave a way to reach you, it's only used to reply and gets deleted 30 days after we're done; the request itself goes 90 days after that.

California folks: we don't sell or share personal information, for money or otherwise, and we don't use it for targeted ads. There's nothing to opt out of.

What we don't do

• No accounts, no sign-ups, no email lists.
• No ads and no ad trackers.
• No cookies set by us.
• No selling, renting, sharing or trading anything to anyone.

The fine print, but readable

This is a fan-made parody. It is not affiliated with, endorsed by, or connected to xAI, Grok or X. Grok's answers are AI-generated jokes with some facts attached, so don't rely on them for anything that matters. The whole site comes as-is, with no promises, no warranties and no guarantees it'll keep working. If we change this page, the new version applies from the date below.

Effective November 3, 2026.