Privacy notice

Last updated 3 September 2026

The controller is Fedor Dyatlov, a sole trader in El Campello, Spain, reachable at fedordyatlov@outlook.com.

What is stored, and why

• Your email address — as a SHA-256 hash, not in readable form. It exists so the free monthly allowance can be granted once per person rather than once per key, and so a purchase can be reattached to you if your key is ever lost. Because it is hashed, we can check whether a given address matches but cannot recover the address or write to you at it.
• Your IP address — also as a SHA-256 hash. Only a count is used, to limit how many keys and demo runs come from one address in a day.
• Your API key — as a SHA-256 hash. The key itself is shown once at creation and never stored. If you lose it, nobody can recover it, including us.
• Usage records: which endpoints you called, how many pages, renders and rows, and your credit ledger. This is what your bill is made of.
• The URLs you submit, in server logs and in job records.

What is not stored

Card numbers, billing addresses and names never reach this service. Stripe handles payment and holds that data as merchant of record; see Stripe's privacy policy. We receive only a payment confirmation carrying your key id, the pack you bought, and the hashed address described above.

Something worth knowing about the recipes

When the service compiles a site it has not seen, the resulting CSS selectors are cached per domain and reused for every customer. That is deliberate — it is why a site costs money to read once and nothing thereafter. The cache holds selectors and a domain name, not your data and not your identity, but it does mean another customer benefits from a site you were first to compile, and that the set of domains compiled is not private between customers.

The rows extracted for you are not shared. Job results are yours and are readable only with your key.

Third parties

• Fly.io — hosts the service and stores its database, in Paris.
• Stripe — processes payments and acts as merchant of record.
• Anthropic — receives the HTML of a page when a site has to be compiled, in order to produce selectors. This happens once per site, not per page, and only for sites that publish no catalogue of their own.

Nothing is sold, and nothing is shared for advertising. There are no analytics or tracking scripts on this site, and no cookies are set.

How long it is kept

Account records and the credit ledger are kept while the account exists and for six years afterwards, because they are financial records. Server logs are kept for about thirty days. Compiled recipes are kept until the site changes enough that they stop working.

Your rights

Under the GDPR you may ask for a copy of your data, its correction, or its deletion, and may object to processing or complain to a supervisory authority — in Spain, the AEPD.

One honest limitation: because your email and IP are stored only as hashes, we cannot search for you by address. To identify your account, send your key id — never the key itself. Deletion removes the account, its hashes and its usage history, except the payment records Stripe and tax law require us to retain.

The legal basis is performance of a contract for everything needed to run your account and bill you, and legitimate interest for the rate limiting that keeps the free tier from being farmed.

Changes

The date at the top says when this last changed. Material changes will be announced here before taking effect.