This notice explains what the Project collects, why, and what is not done with it. It covers this website and the Ekcron application.

Who operates the Project

The Project is run by a single individual in a personal, non-commercial capacity, not by a company. Where data-protection law would treat someone as the "controller" of data processed here, that is the maintainer personally. For any privacy question or request, email us using the address at the bottom of this page.

What is collected

Account details. When you create an account: your name, email address, and authentication identifiers from the sign-in provider. Used to identify you and protect your workspace.
Content you upload. Documents, datasets, prompts, and the models trained from them. Stored so the Project can process them for you.
Operational data. Job records, resource usage, and error logs. Used to debug and to keep the environment running.
Aggregate site analytics. Non-identifying traffic counts for this website. No advertising or cross-site tracking.

Please do not submit anyone else's personal data. If you do, you are acting as that data's controller and are responsible for having a lawful basis to process it here.

Why it is processed

Data is processed only to operate the Project for you — to authenticate you, run the jobs you request, show you results, and keep the system working and secure. Where a lawful basis is required, it is the performance of the agreement you entered into by using the Project, and the maintainer's legitimate interest in keeping it running and secure.

How your content is used

Your data is not used to train any model of the maintainer's, and is not pooled with other users' data.
Your data is not sold, rented, published, or shared for advertising.
Content is scoped to your own workspace so other accounts cannot reach it.
The maintainer claims no ownership of your data, models, or their outputs. See the terms.

Infrastructure providers

Running the Project requires a small number of third-party providers — hosting, object storage, databases, GPU compute, and authentication. They process data only as needed to deliver their part of the system, under their own terms and security practices.

International transfers

Those providers operate in various countries, including outside your own, so data may be stored or processed abroad — including in the United States. Protections available in your jurisdiction may not apply once data is held elsewhere. Using the Project means accepting that, which is another reason not to upload sensitive data.

Model provider API keys

You can use the default model endpoints or configure your own provider API key. A key you configure is encrypted at rest (AES-256-GCM), is never displayed back to you in full, and is used only to sign requests you initiate. Those requests reach the provider you selected, under that provider's terms.

The honest assurance is that keys are encrypted. If you spot anything in the code or behaviour that could leak a credential, please email us to get that fixed rather than disclosing it publicly.

Retention and deletion

Content is kept while your account is active. You can delete datasets, models, and other artifacts in the app; that removes them from active systems, and backups age out on their ordinary cycle. Account-level deletion is not yet self-serve — email us and your account and associated data will be removed.

Security

Data is encrypted in transit, access is authenticated, and stored provider credentials are encrypted at rest. That said, this is an experimental project run by one person: no guarantee against compromise, unauthorised access, or accidental exposure is given or implied, and there is no formal incident-response or breach-notification programme. Where the law requires notification of a breach, reasonable efforts will be made to comply, but no timeframe is promised.

Children

The Project is not intended for anyone under 18, and accounts should not be created by them. If you believe a minor has provided data here, email us and it will be deleted.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to withdraw consent, and to object to certain processing. Email us and your request will be handled. You may also have the right to complain to your local data-protection authority.

Cookies

This website stores only what is needed to remember your theme preference. The application uses cookies required for sign-in and session management. No advertising or cross-site tracking cookies are used.

Changes

This notice may change. The date above always reflects the current version, and there is no notification mechanism — check back here rather than expecting to be told.

Contact

Email: admin@ekcron.com

Privacy