Privacy

Datenschutzerklärung

Draft. The factual sections below describe what the site and gateway actually do. Controller identity, log retention and the processor list are marked TODO and need legal review before launch.

Controller

⚠️ TODO: founder to complete. The controller under Art. 4(7) GDPR is the operator named in the Imprint. Contact: hello@fmcg.network.

What this website collects

Fonts are self-hosted, so no font CDN receives your IP address, and there are no advertising or social embeds. The one third-party tag is Google Analytics 4, which is loaded with Google Consent Mode set to denied by default: it sets no analytics cookies and receives no identifiers unless you accept in the banner. Declining leaves the site fully functional.

Server logs

⚠️ TODO: founder to complete. Confirm retention period with the hosting provider. Standard web server logs (IP address, timestamp, requested path, user agent) are processed on the legal basis of Art. 6(1)(f) GDPR for security and operations.

What the MCP gateway logs

When you use a capability through your AI client, the gateway records telemetry: duration, capability ID, status code, user ID and language. Request and response payloads, meaning your questions, ingredient lists and briefs, are not retained.

Authentication data

Accounts are authenticated via OAuth 2.1 with PKCE and Dynamic Client Registration. We store the email address associated with your account and your role. We do not store passwords from your AI client.

Processors and third countries

⚠️ TODO: founder to complete. List hosting and payment processors, and complete the transfer basis for each (Art. 44 ff. GDPR). Payment processing is handled by Stripe where a paid plan is purchased.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to lodge a complaint with a supervisory authority (Art. 77). Contact hello@fmcg.network.