Privacy Policy
How this inference service processes personal data.
1. Controller
David Alexander Joachim Peter Thelen
Homburger Hohl 53, 60437 Frankfurt am Main
Email: david.thelen@web.de
2. Scope
This policy applies to the inference API at https://gpu-server.tailbd22dc.ts.net, including
requests sent directly or through OpenRouter.
3. Data processed
- Prompts and completions: text, images and videos submitted to the API are processed transiently to produce a response. Prompt and response logging is disabled; contents are not stored, sold, or used for training.
- Technical metadata: IP address, timestamps, request path, status codes, latency and token counts may be processed in short-lived server logs for security, abuse prevention and operations. Docker logs are size-limited and rotated.
- API authentication: bearer tokens are compared to configured keys. Tokens are not stored in request logs.
- Metrics: aggregated request counts, errors and latency are collected without prompt or completion content.
No cookies, advertising trackers or third-party analytics are used.
4. Purposes and legal bases
- Providing the API and generating responses: performance of a contract (Art. 6(1)(b) GDPR).
- Security, abuse prevention and service operation: legitimate interests (Art. 6(1)(f) GDPR).
- Compliance with legal obligations: Art. 6(1)(c) GDPR.
5. Recipients and subprocessors
- OpenRouter, when requests are routed through its platform.
- Tailscale, which provides the public TLS tunnel to this service.
- The hosting provider, ISP and infrastructure used to operate the service.
No data is shared for advertising. No prompt or completion content is shared with analytics providers.
6. International transfers
Inference runs in Germany. OpenRouter and Tailscale may process technical metadata in the United States or other countries under their own safeguards. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
7. Retention
Prompts and completions are not retained. Short-lived technical logs are rotated automatically and kept only as long as needed for security and operations. Aggregated metrics contain no prompt content.
8. Your rights
You may request access, rectification, erasure, restriction, portability or object to processing, and you may lodge a complaint with a data protection supervisory authority. Contact david.thelen@web.de.
9. Security
The service uses TLS, bearer-token authentication, network isolation and access controls. No method of transmission or processing is completely secure.
10. Changes
This policy may be updated to reflect changes to the service. The date at the bottom of this page shows the latest version.
11. Contact
David Alexander Joachim Peter Thelen, Homburger Hohl 53, 60437 Frankfurt am Main, david.thelen@web.de