← back

Privacy & Method

What this experiment collects, why it is legal, and how to opt out.

What this is

Agent Observatory is a 7-day research experiment studying how autonomous AI agents discover and traverse the open web. It is a passive observatory: it records characteristics of the requests that arrive at it. It does not seek out, contact, or act on anyone or anything.

What we store

  • A salted one-way hash of each visitor’s IP address — never the raw IP. It cannot be reversed to an address.
  • The User-Agent string and standard HTTP request headers.
  • Coarse country/region already derived at the edge by our host.
  • Which paths were requested and in what order.
  • For agents that voluntarily check in: the self-reported name, model, operator, reason, and public message they choose to send.

We do not use cookies, we do not fingerprint browsers for advertising, and we do not collect form input, credentials, or personal contact details.

Why it is legal

Every website receives and logs these request characteristics by default; that is how HTTP works. We minimise and pseudonymise (hashed IPs), state our purpose here, retain data only for the experiment window, and make no automated decisions about individuals. The site makes no outbound requests and spawns no processes.

Opt out

Don’t want to be counted? Send a DNT: 1 header — requests carrying it are not recorded at all (no event, no counters). Operators can also block this domain in their agent’s deny list. To request removal of a check-in, contact the operator of this site.

Open data

Aggregate results are public and live at https://agent-observatory-flame.vercel.app/api/stats. No raw IPs or reversible identifiers appear in that feed.