Legal
Privacy policy
Version 1 · effective on publication
Controller
Lukas Behounek, Masarykova 772, 25263 Roztoky, company ID 04563867. Contact: lukas@behounek.it.
User-agent strings you send to the API
We parse them in memory and return the result. We do not store or log the strings or the results. We record only that a request was made with your key, for credit accounting. The API accepts user agents only in request bodies (POST), never in URLs, because URLs appear in infrastructure logs.
The API runs on Google Cloud in Belgium (europe-west1). HTTPS connections are received by Google's global front-end network, which terminates TLS and forwards the request to Belgium.
Your account
| Data | Purpose · legal basis | Where / who |
|---|---|---|
| Email address, sign-in provider (Google or email link) | Running your account · contract | Google Firebase Authentication (Google Ireland / Google LLC) |
| Credit balance, purchases, a hash of your API key, request counts | Providing and billing the service · contract | Google Cloud Firestore, Belgium |
| Billing name, address, VAT ID, payment details | Payment, invoicing, accounting · contract and legal obligation | Stripe Payments Europe, Ltd. (Ireland). We never see full card numbers. |
| Operational logs (time, endpoint, status code, account id — no user agents) | Security and troubleshooting · legitimate interest | Google Cloud Logging, EU; kept up to 30 days |
Google and Stripe act as our processors under their data processing terms. Where they process data outside the EEA, they rely on the EU–US Data Privacy Framework and/or standard contractual clauses.
Retention
Account data is kept while your account exists. Invoices and payment records are kept for the period required by tax law (in the Czech Republic up to 10 years). You can ask us to delete your account at any time; unused credits are then forfeited.
Website
The website sets no tracking cookies. Signing in stores a session token in your browser's local storage so you stay signed in.
Visit statistics
To see how the website is used we run Umami, an open-source, cookieless statistics tool, on a server we operate ourselves (rented from Hetzner Online GmbH); no third-party analytics service receives the data. Your browser sends the statistics to this website, which passes them on to that server.
What is recorded: the pages you view (the address without query parameters, except campaign tags such as utm_source and the selected credit pack), the referring website (only its domain, for other sites), page title, browser, operating system, device type, screen size and language, the country, region and city looked up from your IP address, how far you scroll, links to other sites you follow, and clicks on the site's controls — for example which playground example you ran, starting or completing sign-in (Google or email, and whether the account is new), copying code or your key, running the test request, opening a checkout and which pack you bought. These events never contain your email address, your API key, the user agents you type or payment details.
What is not recorded: no cookies or similar identifiers are set for statistics, and the statistics tool does not store your IP address: it combines the address and your browser's user agent with a secret that changes regularly into a one-way hash, so visits can be counted without identifying you. A few technical values (for example, so that one purchase is not counted twice) are kept in your browser's session storage, which is cleared when you close the tab.
Purpose and legal basis: understanding and improving the website · legitimate interest.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, by writing to lukas@behounek.it. You can also complain to a supervisory authority — in the Czech Republic the Úřad pro ochranu osobních údajů (uoou.gov.cz).