Privacy policy

Last updated: Oct 30, 2026

1. Who we are

Michael Sann (Podshalocef), operating pagespool (“we”), is the data controller for the personal data described here. Contact us at contact@pagespool.com. The operator’s full name and address are in the legal notice.

2. Data we collect

• Account: your email address, your sign-in sessions (IP address and browser identifier), and authentication data. Sign-in runs on an authentication service on the same servers, not an external provider.
• API keys: key name, prefix, creation date, and expiry date. The secret is stored only as a hash.
• Content you submit: the files, documents, and text you send for processing, and their results. They are processed only to deliver your result. They are never sold or used to train models.
• Usage and billing: your plan, subscription status, and credit usage. For your account we also record each API, MCP, and tool call with its result, your sign-up, checkouts, and plan changes, including the reason you give when you cancel. We use these records to improve the products.
• Technical: your IP address and request metadata, used only for security and rate limiting. Usage records never contain an IP address or the content you submit. For a tool use they hold only the file type and ranges of its size and page count.

3. Lawful basis (GDPR Art. 6)

• Contract: providing your account, the API/MCP service, and billing.
• Legitimate interest: security, abuse prevention, rate limiting, and usage statistics that help us improve the products.

4. Retention

Account data is kept while your account is active and deleted on request. Billing records may be retained as required by law (in Germany currently 8–10 years for accounting records).

Usage records (page views and account activity) are deleted after 400 days at the latest. Records linked to your account are deleted at once when you delete your account.

Files you send to the queue are deleted when the job finishes. Results and job records are deleted 7 days after submission. Requests answered in a single round trip are processed in memory and not stored.

Server logs with IP addresses and request paths are deleted after 90 days at the latest. The web server's access log is kept for 7 days. The application sends no request metrics or traces to any monitoring service.

Encrypted backups are kept on a rolling schedule for up to ~5 months, for disaster recovery. Deleted data leaves live systems at once and ages out of backups within that window. After any restore from a backup, accounts that were already erased are deleted again.

5. Subprocessors

• Hetzner (Germany): servers and backups
• Polar: payments and subscription billing, as merchant of record
• Mailgun (Mailgun Technologies, Inc., USA; EU region with servers in Germany and Belgium): sending and receiving email. Its parent company Sinch also processes delivery data as an independent controller to prevent spam and fraud.
• Bunny.net: content delivery network (CDN), EU routing

6. Cookies and browser storage

This site sets one cookie: your login session cookie. It is set only when you sign in, and it keeps you signed in. It expires after 7 days without use, or when you sign out. The cookie is strictly necessary, so the site shows no consent banner. If you do not sign in, the site sets no cookies.

The site sets no analytics, advertising, or cross-site tracking cookies. It loads no third-party analytics script. Each page view is recorded on our own servers, without cookies: the page, the referring site's domain, the language, and the country and device type derived from the request. A page view record never holds your IP address. If you are signed in, it is linked to your account.

If you use the theme switch, your browser saves your choice in its local storage. The choice stays on your device and is not sent to the server. The API reference at /docs saves its display settings, such as the code sample language, the same way.

A tool page may keep its last result in your browser's session storage for the next page. It is deleted when read or when you close the tab.

7. Your rights

You can access, rectify, erase, export, and object to the processing of your data. From your account page you can export your data or delete your account, or email us.

8. International transfers

Our infrastructure is EU-based. Where a subprocessor transfers data outside the EU, it is covered by Standard Contractual Clauses or an adequacy decision.

9. AI features

pagespool offers an MCP server for AI agents. The content of its requests is processed only to provide the service and is never used to train models. Each call is counted in the usage records described in section 2.

10. Changes and complaints

This policy may change. Material changes will be announced. You can file a complaint with your local data protection authority.