Privacy Policy

···

···

··· ···, ···

Email: ···

PURGIFIER uses only technically necessary cookies for authentication (session cookie). These cookies are required for you to log in and use the service.

No tracking cookies, no analytics cookies, and no third-party cookies are set. A cookie consent banner is therefore not required (§ 25 TDDDG — technically necessary cookies are exempt).

Legal basis: Art. 6(1)(b) GDPR (performance of contract) + § 25(2)(2) TDDDG.

To perform text transformations, your text inputs are transmitted via API interfaces to the active AI provider:

• Google Gemini (Google DeepMind, EU / USA)
• OpenAI GPT-4o (OpenAI Inc., USA)
• OpenRouter (OpenRouter, Inc., USA) as an intermediary to a model inference provider
• Optional: Local model (LM Studio / Ollama — no external data transfer)

When OpenRouter is used, your inputs are transmitted to OpenRouter and forwarded to an inference provider available for the selected model. The provider and processing location may vary by model and endpoint.

Transmission occurs solely for the purpose of text transformation. No other personal data is transmitted (no email, no name, no user ID).

OpenRouter Privacy Policy · OpenRouter routing data policies

Legal basis: Art. 6(1)(b) GDPR (performance of contract) · USA transfer: EU-US Data Privacy Framework. OpenRouter may also transmit data internationally to OpenRouter and the provider selected for the model/endpoint; their privacy notices and applicable contractual transfer safeguards govern those transfers.

The following personal data is stored in our database:

• Email address, name (provided during registration)
• Password (stored encrypted, not recoverable)
• Plan status (Free / Blitz / Pro), expiration date
• Fair-use counter (word count per transformation, no text content)
• Admin status, loyalty bonus status

Storage location: Servers in Germany (Nuremberg / Falkenstein). Retention period: Account data until account deletion, then removal within 7 days. Usage counters are overwritten with each transformation.

To prevent abuse, we temporarily store the following data to limit the number of requests per user:

• IP address or user ID as key
• Request counter with time window

No text content is stored in this process. All entries expire automatically after one hour at the latest. Processing occurs exclusively on the German server.

For verification and password reset emails, we operate our own SMTP server. Emails are sent exclusively for account confirmation and password resets.

No disclosure to email marketing services, newsletter providers, or third parties.

Payment processing is handled by Creem as the EU Merchant of Record. Creem processes payment data (credit card, PayPal, etc.) in its own name.

PURGIFIER does not store any payment data (no credit card numbers, no bank details). We receive from Creem only a confirmation of the payment status via webhook.

Creem privacy policy: https://www.creem.io/privacy

The website and all data are hosted on servers of Hetzner Online GmbH in Germany.

Hetzner Online GmbH · Industriestr. 25 · 91710 Gunzenhausen · Germany

A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Hetzner. Your data does not leave the EU.

The following providers are involved in delivering the service. Their respective privacy and contractual terms govern their roles and processing:

• Hetzner Online GmbH — Server hosting (Germany); Data Processing Agreement (DPA)
• Google LLC (Google DeepMind) — LLM API; Data Processing Amendment; USA transfer: EU-US Data Privacy Framework
• OpenAI Inc. — LLM API; Data Processing Agreement; USA transfer: EU-US Data Privacy Framework
• OpenRouter, Inc. — API routing; forwards inputs to the inference provider selected for the model/endpoint. OpenRouter's Privacy Policy and any separately applicable data protection terms govern its processing; the selected provider's terms also apply to inference.
• Creem Inc. — Payment processing as Merchant of Record (own data protection responsibility)

You have the right at any time to:

• Access — What data we store about you (Art. 15 GDPR)
• Rectification — Correction of inaccurate data (Art. 16 GDPR)
• Erasure — Deletion of your data (Art. 17 GDPR) — self-service available at Account → Danger Zone
• Restriction — Restriction of processing (Art. 18 GDPR)
• Data portability — Export of your data (Art. 20 GDPR) — self-service available at Account → My Data (JSON or CSV)
• Objection — Objection to processing (Art. 21 GDPR)

Please send requests to: ···

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Competent supervisory authority (Baden-Württemberg): State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)

PURGIFIER logs server events (e.g. request errors, email delivery, LLM calls) exclusively in memory using an in-memory ring buffer (max. 200 entries). These logs are never written to disk and are discarded when the server restarts. They do not contain any text content from your posts.

Personal data such as email addresses and API keys are automatically redacted before logging. Only administrators can access the logs via the admin panel. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security and error diagnosis).