Privacy

Your rights under GDPR

You can exercise the following rights at any time. The technical endpoints below back each one:

• Access (Art. 15) — Download a JSON bundle with every record we hold on you at /api/proxy/v1/me/export.
• Erasure (Art. 17) — Soft-delete your account at POST /api/proxy/v1/me/delete. A 30-day grace period applies; we hard-delete with cascade afterwards.
• Rectification (Art. 16) — Update your profile in Settings.
• Portability (Art. 20) — The export bundle is machine-readable JSON.
• Audit log — See every action recorded against your account at /api/proxy/v1/me/audit.

Data processors

SHORT INFO uses the following sub-processors. A Data Processing Agreement (Art. 28) is in place with each one:

• Hetzner Cloud (DE) — VM hosting, object storage
• Stripe (IE/US) — payment processing
• Anthropic (US) — Claude API for AI features (opt-in)
• OpenAI (US) — GPT API for AI features (opt-in)
• Google (US) — Gemini API for AI features (opt-in)
• DeepL (DE) — machine translation

You can BYO API keys for the AI processors in Settings → Credentials; in that case requests go from our servers directly to your account with the provider and are not logged on our side.

Cookies

We use the following cookies. Only the essentials are set without consent; analytics + marketing are opt-in via the banner.