Privacy

[MATT with counsel: this page is a structured draft. Review every section against legal note v0_3 before launch. Nothing below is legal advice.]

Who is responsible

CMSR LLC, Washington, United States. Contact: info@questionwhai.com.

What is collected

• Server access logs: your IP address, the page requested, the referring page, browser and language headers, and the time.
• Derived visit records: location to city level, the network owner of your IP address, pages viewed, referrer, campaign, and clicks on outbound links.
• Calls to the agent endpoint at /mcp: the tool called, the language, search text, the client name the agent declares, and the same derived data as for page views.
• Survey answers and optional contact details, only if you fill in a survey. Surveys run on Google Forms, on Google’s domain.

Why, and on what basis

[MATT with counsel: security and operations, and understanding the audience including which organisations visit (legitimate interest); survey participation (consent).]

How long

• Raw access logs, including IP addresses: deleted after 7 days. They are never backed up.
• Derived visit records: kept indefinitely. They contain no IP address.
• Survey data: [MATT: define]

Who else handles data

• Hetzner Online GmbH, Germany: hosting.
• Google: survey forms; encrypted backup copies that Google cannot read.
• GitLab: the site’s source and text only, no visitor data.
• DeepL SE, Germany: translation of published text only, never visitor data.

Data is processed in Germany and the United States.

Your rights

[MATT with counsel: access, correction, deletion, objection, complaint to a supervisory authority. Requests by email. A visitor would need to give the approximate time and network for records to be found.]

What this site does not do

No cookies, no browser storage, no scripts that observe you, no advertising, no sale or sharing of data, no session recording. Nothing is stored on your device.

Data sources

Location and network owner: IP Geolocation by DB-IP.