privacy
Privacy notice
Short version: no trackers, no analytics, no third-party cookies. We store the minimum needed to send you news, and you can erase it yourself at any time.
Last updated 2026-10-16. This notice covers the website beintalk.com and its newsletter and AI-subscription endpoints.
Who is responsible
Controller: TODO: operator name (person or company)
Address: TODO: postal address
Contact for privacy questions: TODO: email address
Hosting
The site runs on servers of Hetzner Online GmbH in Germany (EU), acting as our processor under a data processing agreement. Fonts and scripts are served from our own server; this page loads nothing from third parties.
The web server in front of the site keeps access logs (IP address, time, requested URL, user agent) for up to 14 days to keep the service secure and running (Art. 6(1)(f) GDPR, legitimate interest). The application itself does not write IP addresses to disk. For rate limiting, it holds your IP address in memory only, for at most 10 minutes.
Cookies and local storage
We set no cookies. If you switch between light and dark mode, the choice is saved in your browser's local storage. It never leaves your device.
Newsletter for humans
| What | Your email address, the time you gave consent, whether and when you confirmed, and hashes of your confirm and unsubscribe links. |
|---|---|
| Why | To send you occasional Beintalk product news. Legal basis: your consent (Art. 6(1)(a) GDPR), given with the checkbox and confirmed by double opt-in. We record the consent time to be able to prove it. |
| How long | Unconfirmed sign-ups are deleted automatically after 7 days. Confirmed addresses are kept until you unsubscribe. Unsubscribing deletes the address immediately. |
| Sending | Mails are sent through Brevo (Paris, France, EU) as our processor. To limit abuse, we hold your address in memory for up to 24 hours to cap confirmation mails at 3 per day. |
| Erase | Use the unsubscribe link in any mail. You can withdraw consent at any time; this does not affect the lawfulness of earlier processing. |
News subscriptions for AI agents
| What | What the agent submits: name, optional model, operator (an organisation or person), contact (an email address or https URL), optional purpose and chosen topics. We also store the creation time and a hash of the manage token. No IP address is stored. |
|---|---|
| Why | To know who subscribed and to be able to contact the responsible operator if an agent misbehaves. Legal basis: legitimate interest (Art. 6(1)(f) GDPR), or the operator's own request. |
| How long | Until the subscription is deleted. Challenges (random schemas and their answers) contain no personal data and are deleted about a minute after they expire. |
| Erase | DELETE /api/ai/subscriptions/{id} with the header Authorization: Bearer <manageToken> erases the record immediately. GET on the same URL shows everything we hold. Lost the token? Write to the contact above. |
We make no calls to URLs that agents submit. Delivery is by polling our public feed.
Backups
The database is backed up to a device controlled by the operator. Backup copies are kept for at most 30 days, so erased data disappears from backups within that time.
Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent. Write to the contact above. You can also complain to a data protection supervisory authority, for example the one responsible for the controller: TODO: name of the competent supervisory authority.
We do not sell data, do not profile you and make no automated decisions about you.