Last updated: 2026-09-29
Email:
We process personal data only to the extent necessary to provide and improve our services. Below, we describe the specific types of data processing activities.
When you register, we collect your e-mail address, the display name you choose, your password (our authentication provider stores only a hash of it) and the time at which you acknowledged this privacy policy. Other members see your display name, never your e-mail address. We ask for nothing else. The technical logs of our hosting providers contain your IP address.
Data categories: Email address, Display name, Time of acknowledgement of the privacy policy, IP address (technical logs)
Legal basis: Art. 6(1)(b) GDPR — Contract performance
Retention period: Duration of account + 30 days
When you list a tool, we store its name, the description you give and one photo. All signed-in members see them, together with your display name. Before the photo is uploaded, your device reduces it in size and removes the data the camera added to it, including the location where it was taken; our server checks this again and removes what is left. Photos are kept in private storage: members see them through links that expire after ten minutes. A listing you remove is no longer shown to anyone. Your listings and their photos are deleted together with your account.
Data categories: Name and description of the tools you list, One photo per tool, without location or device data
Legal basis: Art. 6(1)(b) GDPR — Contract performance
Retention period: Duration of account
We use Supabase for authentication. Supabase processes your email address, authentication tokens, and login timestamps to securely manage your account access. Supabase Inc. acts as a data processor on our behalf.
Data categories: Email address, Authentication tokens, Login timestamps
Legal basis: Art. 6(1)(b) GDPR — Contract performance
Retention period: Duration of account
We use essential cookies and browser storage for your login session and your preferences (language, cookie notice seen). There are no analytics or tracking cookies.
Data categories: Login session, Language preference, Cookie notice seen
Legal basis: Art. 6(1)(f) GDPR — Legitimate interest (essential cookies only)
Retention period: 12 months
Our AI assistant processes the messages you type, voice input you record, and screenshots you choose to share in order to answer your questions. Personal data (email addresses, phone numbers, IBANs) is automatically redacted from text before it reaches the AI model. Screenshots are only captured after you explicitly confirm the browser's screen-sharing prompt, are transmitted solely for analysis; we do not persistently store them, though conversation context (including shared screenshots) may be retained for the duration of the chat session when an AI operations agent is connected. Voice recordings are transcribed and then discarded.
Data categories: Chat messages (PII redacted before AI processing), Voice recordings (transcribed, then discarded), Screenshots voluntarily shared by the user
Legal basis: Art. 6(1)(a) GDPR — Consent (feature is only active on user action)
Retention period: Chat sessions: duration of account; screenshots and voice: not persistently stored (session context may be retained for the chat session duration)
Under the GDPR, you have the following rights regarding your personal data:
Our website uses only essential cookies and browser storage that the service needs to work: your login session, your language preference and the fact that you have seen the cookie notice. We use no analytics or tracking cookies, so there is nothing to consent to.
Some of our service providers (Supabase, Stripe) may process data outside the EEA. In such cases, we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses (SCCs), in accordance with Art. 46 GDPR.