Privacy Policy

Last Updated: October 2026

This Privacy Policy describes how we process personal data in full compliance with the EU General Data Protection Regulation (GDPR).

1. Data Controller and Contact

The Data Controller responsible for processing your data via the Service is detailed in our mandatory Imprint/Impressum. For any privacy-related matters, you can reach us directly at info@byphil.eu.

2. Legal Basis for Data Processing (GDPR Art. 6)

  • Performance of a Contract (Art. 6(1)(b) GDPR): Processing your email address via the OTP login flow to provision and maintain your paid Pro subscription.
  • Legitimate Interests (Art. 6(1)(f) GDPR): Processing technical identifiers (such as the X-Install-ID or transient text tokens) to enforce free-trial anti-abuse caps and route request metrics safely.

3. Zero-Retention Text Processing Array

In-Memory Volatility: When you execute a text or document summary request, the payload context is transmitted to our secure loopback gateway (api.byphil.eu) and proxied directly to OpenRouter.

Once the summary token stream is returned to your browser view, the raw source text is permanently expunged from our memory arrays. We do not cache, log, store, or train models on the contents of your documents.

4. Third-Party Data Handshakes & Paddle Processing

For payment infrastructure, billing, and global tax processing, your transactional data is shared directly with our Merchant of Record, Paddle. You can view Paddle's specific data processing metrics via their privacy documentation at paddle.com/legal/privacy.

To execute AI inferences, text streams are securely forwarded to OpenRouter. Where data is transferred to downstream servers outside the European Economic Area (EEA), we ensure strict security protocols are met via standard zero-data-retention pipeline privacy rules.

5. The Explore Island ("Visit Phil")

The 3D island on this website (reachable via /visit or the projects page) works without an account. What it processes:

  • Seeing other visitors (multiplayer): while the island is open, your browser sends your figure's position over a WebSocket connection. The server passes it on to other visitors in real time and keeps it in memory only while you are connected — nothing is stored. You appear under a random animal name; there is no free text chat. Your IP address is used transiently in memory to limit connections per address (Art. 6(1)(f) GDPR: protecting the service from abuse).
  • Guestbook notes: if you pin a note to the rock, its text and the optional name you enter are stored in our own database. A short automated check (an AI model via our gateway api.byphil.eu) decides whether it appears right away or waits for a manual review. Notes are public once approved. Please don't enter personal data; we delete a note on request (Art. 6(1)(a) GDPR: consent by submitting it).
  • Rejection bonfire: burning a rejection only adds a number to a shared total. No text or identifier is stored; your IP address is used transiently in memory for rate limiting.
  • Workshop: a challenge you describe there (and the optional industry) is sent to an AI model via our gateway (api.byphil.eu) to sketch a first approach. The answer is cached for the same text, without any link to you. Please don't enter confidential details or names.
  • Office for Future Jobs: the three answers you give there are sent to an AI model via our gateway (api.byphil.eu) to suggest roles. We store only the resulting suggestions under a random id (so a shared link can show them), not who asked. Please don't enter personal data.
  • Manga photo booth: only if you switch the camera on (or pick a photo) in the booth, one square photo is sent through our server to an image model (Google Gemini 3.1 Flash Lite Image via our gateway api.byphil.eu and OpenRouter) and the manga picture comes back. We don't store the photo or the picture; the collector card is made in your browser and stays with you. The camera stops when you leave the booth. Your IP address is used transiently in memory for rate limiting (Art. 6(1)(a) GDPR: consent by taking the photo).
  • Island numbers and the summit challenge: the island counts visits (once per browser session), notes, workshop sketches, notices and summit runs as plain daily tallies for its data dashboard — no identifiers. A summit run is timed by our server and stored with the week, the time and a random animal name only.
  • Daily finds and streak are kept in your browser's local storage only.
  • Island pass, stamps and settings (sound, voices) are kept in your browser's local storage only and never sent to us. A share link you create contains only the earned titles and a few numbers (e.g. minutes on the island), nothing that identifies you.
  • Questions and voices: questions you ask Mini-Phil or the residents are answered by an AI model via our gateway (api.byphil.eu); spoken lines are generated by a text-to-speech model the same way and cached as audio. Please don't enter personal data in questions.
  • Postbox and fax: a letter you send there (your email address and message) reaches us like the contact form, so we can reply (Art. 6(1)(b) GDPR: pre-contractual steps at your request).

6. Your GDPR Rights

As an EU resident, you hold the following statutory rights under the GDPR:

  • Art. 15: Right of Access to your stored parameters (Email, subscription state).
  • Art. 16 & 17: Right to rectification or complete erasure ("Right to be forgotten") of your account record.
  • Art. 20: Right to data portability.

To exercise these rights, submit a request to info@byphil.eu. You also reserve the right to lodge an official complaint with a competent data protection supervisory authority.

← Back to Legal Overview