← Startseite · Impressum · Datenschutz · Privacy (EN) · Nutzungsbedingungen

Privacy Policy

English summary of the German Datenschutzerklärung, which is the legally binding version.

1. Controller

2. Overview

This service provides public data and calculation tools to AI agents and developers over a REST API and an MCP server. No account or sign-up is needed. We use no tracking or analytics tools, no advertising cookies, no social plugins, and load no third-party fonts, scripts or content in your browser.

3. Hosting

The service runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the EU, under a data processing agreement (Art. 28 GDPR).

4. Data processed on every request

To deliver a response the server processes your IP address. It is not stored in plain text, only as a pseudonymous hash (HMAC with a daily rotating key), together with time, path, status code, response time, user agent and a derived client category (e.g. "AI agent", "browser").

• Purposes: delivery, abuse and attack prevention, enforcing the free daily quota (rate limiting), error analysis and anonymous usage statistics.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, stable and fairly usable service).
• Retention: quota counters 3 days; access statistics 400 days, then deleted automatically. Technical server error messages (without IP addresses) are kept in a rotating container log of at most 30 MB.

5. Search queries ("demand radar")

Search terms you send to /api/v1/ask, the catalog search, the website search box or the MCP tools ask_anything and search_apis are stored together with the pseudonymous hash and the user agent, to learn which data is in demand and improve the service (Art. 6(1)(f) GDPR). Retention: 12 months. Other parameters are kept only briefly in the response cache (minutes to hours), without any link to who sent them; conversation content is never received beyond the tool arguments. Do not put personal data into queries.

6. Parameters passed to data sources

To answer a request, our server sends the necessary parameters (e.g. a place name, country code, package name or a URL you provide) to the relevant public data source, such as Open-Meteo (Switzerland), the European Central Bank / Frankfurter, World Bank (USA), Eurostat, Nager.Date, npm, GitHub (USA), Wikimedia/Wikidata (USA), arXiv (USA), openFDA (USA), U.S. SEC (USA) or OSV.dev (USA). Legal basis: Art. 6(1)(b) or (f) GDPR. Your IP address is not passed on; the request comes from our server. Every response names its source.

7. Time-series archive

We continuously store data from openly licensed public sources (e.g. exchange rates, weather, macro data) to provide it over time. Results of calls with simple identifiers (e.g. country=DE) may be included. Free text, URLs and similar inputs are not archived. The archive contains no information about who made a request.

8. Cookies

No cookies are set for visitors or AI agents. Only the operator receives a technically necessary session cookie after logging in to the admin area (admin_session, 7 days).

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Contact the email address above. Because IP addresses are only stored pseudonymously, we may only be able to link data to you if you give us additional information (Art. 11 GDPR). You may also lodge a complaint with a data protection supervisory authority.

10. No automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

Last updated: 28 October 2026