Privacy · RobotsDataset

Privacy

Draft for legal review. Short, because we collect little.

For visitors of this site

No trackers. No third-party analytics, no advertising cookies. Fonts load from Google Fonts (your IP reaches Google); self-hosting is planned.
Cookies. lang (language) and theme (localStorage) are conveniences. dbg_key is set only when you sign in with an API key on the Account page: HttpOnly, SameSite=Strict, Secure; it holds the key itself so we can show your balance and charge explicit "full record" views. It is never read by /v1. Deleted on sign-out.
Server logs. IP address and request are kept for up to 30 days for abuse limiting and the free daily quota.
Payments. x402 payments are public transactions on Base (USDC or USDT) that go straight to the operator's wallet; we keep only the transaction id and the amount. Card payments are not accepted at the moment; if enabled they would go through Stripe, which would hold the card data.

We publish only already-public professional facts: address, phone, hours, services, published prices, business mailboxes. No review text, no personal phones or e-mails of individuals, no national ID numbers.
Legal basis: legitimate interest (publicly available professional information); you may object at any time.
Opt-out: DELETE /v1/optout or the opt-out page of your record. An e-mail on your domain = immediate; otherwise reviewed within 5 days. Correction: free, via a magic-link claim.
Raw snapshots of public pages (for provenance and audit) are kept for 12 months.