The honest notes.

What happens to the text you put in, what's actually generating the cards, and how to reach the person who built this. Short, because there isn't much to it.

Privacy #

Hidden Move is built to be used and forgotten. There is no account. There is no database of your situations.

What gets sent

When you press the button, your situation text and your chosen severity are sent over HTTPS to a Cloudflare Worker we run, which forwards them to Anthropic's Claude API. The model generates the cards and returns them. That's the whole loop.

What gets stored

Nothing about the content of your situation. We log only operational metadata for each request:

• how long the call took
• how many characters your text was
• whether the crisis branch was triggered (so we can monitor safety)
• HTTP status and rate-limit counters
• if you tap helped or didn't on a card: a single anonymous counter goes up — which card type, which vote, nothing else. No ID, no IP, no link to what you wrote. We use the totals to make the cards better.

The situation text itself is never written to disk on our side and is not retained after the response is returned. Anthropic's API processes the text to generate the response; their data-handling policy is at anthropic.com/legal/privacy.

Cookies and tracking

Hidden Move sets no cookies, runs no analytics, embeds no third-party scripts beyond Google Fonts (for the typography). Cloudflare, which sits in front of the site, may set its own security cookies as part of bot protection.

What you should still do

When the site is busy

To keep this free and to stop runaway costs if anyone tries to abuse it, Hidden Move has a daily ceiling on how many readings the AI will generate, and a per-visitor rate limit. If you hit either, you'll see "Hidden Move has had a lot of traffic today — try again tomorrow" or "you are going too fast — wait a minute". Those messages are deliberate, not bugs. Tomorrow (UTC midnight) the daily counter resets. If you genuinely need a reading and can't get one, the contact below is the place to flag it.

How the AI works #

The boring honest version, because you deserve to know what's behind the cards before you trust them.

The model

Cards are generated by claude-sonnet-4-5 via Anthropic's API. That's a general-purpose large language model — the same family used for ChatGPT-style chat, but tuned to be more cautious and more honest about uncertainty. Hidden Move is not fine-tuned. It's a thoughtful prompt around a strong base model.

The prompt

A single system prompt, currently version v0.2, tells the model:

• What kind of output is wanted (a reframe, an action, an honest acknowledgement — never just one or just two)
• What not to do (toxic positivity, "everything happens for a reason", silver-lining-the-trauma)
• To return UK-specific resources when relevant (HMRC, NHS, Citizens Advice — not US equivalents)
• Hard rules for crisis content: if the input mentions self-harm, suicidal thinking, abuse, or active danger, the model is required to drop the cards entirely and return verified crisis resources for the user's region

The safety branch

The crisis check happens inside the model itself, not as a regex over your text. That means it catches phrasing the prompt didn't anticipate. You can see it working in the fifth example on the demo page — the input is sad and ambiguous, and the cards are replaced with Samaritans, Shout, 999/111, and CALM. We will never trade safety for a clever reframe.

The eval

Before the prompt went live, it was run against a 20-case golden set covering severity 1–4 plus three crisis scenarios. Pass rate: 19/20 normal cases + 3/3 crisis cases (96% overall, with the one fail later confirmed as a JSON-parsing flake on the harness side, not a bad answer from the model). The golden set is rerun whenever the prompt changes.

What can still go wrong

Language models hallucinate. The cards are guidance, not advice. If a reframe doesn't land, ignore it. If an action looks wrong for your specific situation, it probably is — you know more about your life than the model does. Hidden Move is a sounding board, not an oracle.

Why no app? #

Hidden Move is deliberately a web page, not an app on your phone. There won't be an iOS or Android version. Here's why, because it's a fair question and the answer is a feature, not a shrug:

• This is a reach-for tool, not a live-in one. Apps want you to open them daily, build streaks, become a habit. Hidden Move wants you to type the thing, get the cards, close the tab, and get on with your day. The web is the right home for that.
• "Nothing stored" is louder on the web. No signup screen ever appears. The proof is the medium. In an app store the same claim is one among many wellness apps that mostly aren't telling the truth.
• The 30% Apple tax kills the supporter tier economics. £2/month becomes £1.40 net. The supporters who keep this free for everyone else deserve their money to land where they intended.
• We can ship a fix in 30 seconds. If a crisis-line phrasing needs urgent change, that's a same-minute deploy on the web. In an app, it's a review queue. For a product that talks to people in distress, speed-to-fix is a safety feature.
• It's one person building this. Two binaries, two release cycles, two crash report streams, two privacy policies. Half the work forever for very little gain.

If you want it to feel more like an app, modern phones let you "Add to Home Screen" from your browser — you'll get an icon, no browser chrome, and it opens as quickly as anything else on your phone. That's the only "app" we'll ever ship.

Contact #

Hidden Move is built and run by David Allsop — same person, no team, no company structure around this one.

Best way to reach me: hello@webcopilot.co.uk. Put "Hidden Move" somewhere in the subject and I'll see it faster.

Reasons to write:

• A reframe genuinely helped and you wanted to say so (I will read these. They are the whole reason this exists.)
• A reframe was off, harmful, or felt wrong — I want to know. The prompt only improves if I see where it fails.
• You spotted a bug, a typo, or a broken link.
• You're a journalist, researcher, or builder who wants to talk to the person behind it.
• You think Hidden Move should exist somewhere I haven't put it.

Things I can't do over email: replace a counsellor, return your situation text (we don't store it), or process anything time-critical. For crisis support, please use the resources in the guardrail block at the bottom of every page on this site.

Last updated: 13 June 2026. Prompt version: v0.2 (adds an under-16 safety signal that shifts the cards to a school-age register and routes crisis to Childline when the writer is clearly a child). Model: claude-sonnet-4-5. If any of those change in a way that affects what's on this page, this page gets updated the same day.