Privacy
What the site collects, on what basis it is held, and how to change your choice.
Last updated July 16, 2026
Agentic Surfaces is a static catalog. It has no accounts, no sign-in, and no database of readers. Three things still reach a third party or a mailbox: an analytics cookie if you accept one, the request logs your visit generates, and any email you choose to send. This page covers each of them.
Who operates the site
Agentic Surfaces is operated by Daniel Woods (ABN 30 344 805 021), trading as Amoeba Design, in the Australian Capital Territory. For the purposes of the Privacy Act 1988 (Cth) the operator is the entity that handles the information described here; under the General Data Protection Regulation the operator is the data controller. Contact: hello@agenticsurfaces.org.
The operator handles personal information in line with the Australian Privacy Principles in the Privacy Act, and applies the standards on this page whether or not a small-business exemption would otherwise be available. Where the GDPR applies to a reader in the European Economic Area or the United Kingdom, the lawful bases named below are the ones relied on.
Analytics, and only if you accept it
The site uses Google Analytics to count visits and see which patterns get read. It is off until you accept it. Nothing is stored on your device and no request is made to Google until you press Accept on the banner, and the catalog is fully readable if you never do. Accepting lets Google set a cookie that distinguishes your browser from another, and sends Google your IP address, the pages you open, the site that referred you, and your browser and device type.
The lawful basis is your consent, under Article 6(1)(a) of the GDPR and Article 5(3) of the ePrivacy Directive. You can withdraw it below at any time, which takes the same single press as giving it and removes the cookies immediately. If your browser sends a Global Privacy Control signal, the site reads that as a refusal: analytics stays off and you are not asked.
The choice is remembered in your browser's local storage, under the key
as-consent, so you are not asked again on every page. It records
the choice itself and nothing else. Because it is stored in the browser, the
choice applies to that browser on that device, and clearing site data resets it.
Server logs
The site is hosted by Netlify, which records requests to its servers as part of delivering the site. Those records include your IP address, the time of the request, the page requested, and your browser's user-agent string. An IP address is personal information under the Privacy Act and personal data under the GDPR. The logs are generated whether or not you accept analytics, because a server cannot answer a request without knowing where to send the answer.
The lawful basis is legitimate interests under Article 6(1)(f) of the GDPR: serving the site, and identifying abuse or attacks against it. The logs are held by Netlify under its own retention schedule and are not exported, combined with anything else, or used to build a profile of any reader.
The site invites correspondence at hello@agenticsurfaces.org. If you write, the operator receives your email address, whatever name your mail client sends, and everything in the message. That is personal information, and it is used to answer you and to act on corrections or feedback about the catalog. It is never added to a mailing list, and there is no mailing list to add it to.
The lawful basis is legitimate interests under Article 6(1)(f): responding to correspondence you started. Messages are kept for as long as the matter they concern is live, and no more than two years after the exchange ends, unless a law requires them to be kept longer. Please don't send sensitive information as the Privacy Act defines it, such as health, biometric, or political-opinion information; the site has no reason to hold any of it.
What the site does not collect
Search runs entirely in your browser. The index is a JSON file built at deploy time and fetched whole the first time you open the palette; what you type is scored in memory on your device and never sent anywhere. There are no accounts, no forms, no comment fields, no advertising, no marketing pixels, and no third-party trackers beyond the analytics described above. The response surfaces throughout the catalog are illustrative mock interfaces: the fields in them are not connected to anything and record nothing.
Who else processes it
Two providers process information on the operator's behalf, each under its own published terms: Netlify for hosting and the request logs it generates, and Google for analytics, where you have accepted them. Both are United States companies, so accepting analytics involves your information being handled outside Australia and outside the European Economic Area. That is a disclosure to an overseas recipient for the purposes of Australian Privacy Principle 8. Neither provider is authorized to use the information for its own purposes, and nothing is sold, traded, or shared with anyone else.
Your rights
You can ask what personal information the operator holds about you, ask for it to be corrected, and ask for it to be deleted. Under the GDPR you can also object to processing based on legitimate interests, ask for a copy in a portable form, and withdraw consent at any time without giving a reason. Write to hello@agenticsurfaces.org and you will get an answer within 30 days.
In practice the only thing likely to be held about you is an email you sent, and the logs, which are not indexed by person and generally cannot be traced back to a named individual without information the operator does not have. If a request can't be met, you will be told why.
Complaints
If something here has gone wrong, raise it at hello@agenticsurfaces.org first. If that doesn't resolve it, you can complain to the Office of the Australian Information Commissioner. Readers in the European Economic Area or the United Kingdom can complain to their own supervisory authority instead.
Changes
If this policy changes, the date at the top of the page changes with it. A change that widens what is collected will re-ask for consent rather than rely on a choice you made about something narrower.