Privacy Policy
Last updated: 8 December 2025
1. Who we are
This website is a personal prototype project operated by a single individual.
2. What data we collect
2.1 Account data
- User ID
- Name
- Email address
- Avatar (for example from your auth provider)
- Your own API keys for AI providers (for example OpenAI, Grok)
2.2 Content data
- Equations and pages you create
- Text descriptions you write
- JSON configuration used to render charts
- Visibility of pages (private or public)
2.3 Technical and usage data
- Basic server logs (minimal, only what is needed to operate the service)
- Anonymous analytics via Umami without IP address and without personal identifiers
- Authentication related cookies from NextAuth (session and security cookies)
3. Where and how data is processed
- Application hosting: Google Cloud Run, region europe-west1 (EU)
- Database: Supabase, AWS region eu-west-1 (EU)
- Analytics: Umami Cloud, data region EU
These providers act as processors that help me host and run this prototype.
4. AI integrations and international transfers
The service can send text and other data to external AI providers to generate or assist with content.
- Examples of providers: OpenAI, Grok and similar services
- Your API keys for these services can be stored in the database as a secret that only your account uses
- When you use AI features, the text you provide and related context can be sent to these providers
- These providers may process data outside the European Union
By using AI features or adding your API keys, you ask the service to send data to these providers and you accept their own privacy and terms.
5. Purposes and legal bases
5.1 Purposes
- To create and manage your account
- To let you create, edit and view your pages and charts
- To provide optional AI based features for generating or editing content
- To keep the service secure and running (technical logs, error handling)
- To understand basic usage in an anonymous way (Umami)
5.2 Legal bases under GDPR
- Performance of a contract: account, content storage, basic functionality
- Legitimate interest: minimal analytics and security of the service
- Your explicit action and request: use of AI integrations and your own API keys
6. Data retention
- Account and content data are kept while this prototype is online and active
- The whole project may be stopped at any time, and in that case the data may be deleted
- You can delete your account yourself in the account settings
- When an account is deleted, the account record, API keys and related content are removed or scheduled for removal in a short period
- Backups may exist for a limited time according to Google Cloud and Supabase defaults
7. Cookies
This service uses only what is technically necessary for:
- User authentication and sessions (NextAuth)
- Basic anonymous analytics (Umami, configured without IP and without personal identifiers)
No advertising cookies or tracking for marketing are used.
8. Your rights
If you are in the European Union or a similar jurisdiction, you have rights over your personal data, including:
- Right of access (to know what data is stored)
- Right to rectification (to fix incorrect data)
- Right to erasure (right to be forgotten)
- Right to restriction of processing
- Right to data portability
- Right to object to certain processing
For most basic cases you can:
- Delete your account directly in the account settings
- Or send a request by email to bezrodnov@icloud.com
9. Children
This prototype is not intended for children under 16 years of age. Accounts should only be created by adults.
10. No guarantees and prototype status
This is an experimental prototype for personal use and for a small group of users. It may change or be shut down at any time. I try to keep data safe and to follow GDPR principles in a reasonable way for a small non commercial project.
11. Contact
If you have any questions about this Privacy Policy or your data, you can contact via email bezrodnov@icloud.com