--- title: "Privacy policy" canonical_url: https://cookiesforai.app/privacy last_updated: 2026-10-03 type: page summary: "How cookiesforai.app handles personal data under the GDPR, no accounts, no cookies, no analytics and no third-party requests, only the hosting provider's server logs and the email you send us." --- # Privacy policy CookiesForAI has no accounts, no forms, no cookies, no analytics and no advertising. Your browser loads every page, font and image from our own domain and contacts no third party. This page says what is still processed when you visit, under the EU General Data Protection Regulation (GDPR) and the German TDDDG. ## 1. Controller The controller responsible for the processing of personal data on this site is: CookiesForAI, Inhaber Alexandru-Daniel Tatu
c/o flexdienst – #21685
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Germany
Email: [cookiesforai@gmail.com](mailto:cookiesforai@gmail.com) We have not appointed a data protection officer; the law does not require one for this site. ## 2. What is processed when you visit | Data | Purpose | Legal basis | Stored for | |---|---|---|---| | IP address, date and time, the page requested, status code, user agent and referrer of each request | Delivering the page to your device, keeping the site stable and secure, defending against attacks | Art. 6 (1)(f) GDPR: our legitimate interest in running a working and secure website | We can read request logs for one day. Our hosting provider keeps its own technical logs as described in its privacy notice | | Your email address and whatever you write, if you email us | Answering you | Art. 6 (1)(f) GDPR: our legitimate interest in answering enquiries; Art. 6 (1)(b) GDPR if your enquiry is about a contract | Until your enquiry is settled, longer only where a legal retention duty applies | We do not combine this data with other sources, do not build profiles and do not use it for advertising. You are not obliged to provide any data; without the technical request data a web page cannot be delivered to you. ## 3. Hosting This site is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. Vercel delivers our pages and, to do so, processes the request data in section 2 on our behalf as a processor under a data processing agreement (Art. 28 GDPR). Vercel serves requests from data centres close to the visitor and may process the data in the United States. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as adequate (Art. 45 GDPR); the agreement also includes the EU standard contractual clauses (Art. 46 GDPR). Vercel's own notice is at [vercel.com/legal/privacy-policy](https://vercel.com/legal/privacy-policy). ## 4. Email Our mailbox is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you email us, your message is stored there, and Google may process it on servers outside the EU, including in the United States, where Google LLC is certified under the EU-U.S. Data Privacy Framework. ## 5. No cookies, one setting in your browser We set no cookies and read none. If you switch the site between light and dark, your browser keeps that one choice in its local storage under the name `theme` (value `light` or `dark`). It never leaves your device, identifies nobody and is stored only after you use the switch. This is strictly necessary to provide a function you asked for, so no consent is needed (§ 25 (2) no. 2 TDDDG). You can delete it at any time in your browser settings. ## 6. Visits by AI crawlers and from AI assistants To learn how AI systems read this site, we log a line when a request comes from a known AI crawler, or arrives from a link in an AI assistant's answer. The line holds the time, the name of the crawler or of the assistant's website, and the page requested. It holds no IP address, no cookie and no identifier, so it cannot be linked to a person. ## 7. Agent endpoint and open data Our read-only MCP endpoint at `/api/mcp` and the data files under [/data](/data) answer requests from software such as AI agents. Such a request is handled like any page request in section 2. The search words a client sends to the endpoint are used to produce the answer and are not stored by us. ## 8. Links to other websites Our pages link to the websites, repositories and documentation of the skills, servers and tools we list. No data goes to them while you read our pages. When you follow a link, the other site's own privacy rules apply. ## 9. Recipients Besides the providers named in sections 3 and 4, we pass personal data to nobody, unless a law obliges us to. ## 10. Your rights Under the GDPR you have the right to: - access the personal data we hold about you (Art. 15); - have it corrected (Art. 16) or erased (Art. 17); - have its processing restricted (Art. 18); - receive it in a portable format, where the processing rests on consent or a contract (Art. 20); - **object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1)(f) GDPR (Art. 21).** We then stop, unless we have compelling legitimate grounds that override your interests or need the data for legal claims. To use a right, email us at the address in section 1. No decision about you is made by automated means, and no profiling takes place (Art. 22). You also have the right to complain to a data protection supervisory authority (Art. 77), in particular in the EU country where you live or work. The authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
[www.lda.bayern.de](https://www.lda.bayern.de) ## 11. Changes We update this page when the site or the law changes. The date at the top shows the current version.