Privacy

Who is responsible

Email: [email protected]

What is stored, and why

• An anonymous session. Visiting sets one cookie,syt_session, which is HttpOnly, Secure and SameSite=Lax. It links your case to your browser. It is not an account, it carries no email address or name, and no third-party script can read it.
• The case you describe. The figures and constraints you enter are stored on our server so the engine can produce and reproduce a report. This is the product working, not profiling.
• No analytics and no advertising. The site loads no third-party script, font, image or frame — this is enforced by the Content-Security-Policy header, which allows script only from this origin. There is no tracking pixel and no advertising identifier to consent to.

Payment

Card payments are handled by Stripe. Card details are entered on Stripe’s side and are never sent to, or stored on, this server. We receive the payment result and the identifiers needed to match it to your case.

Legal bases

• Producing your report: performance of a contract (Art. 6(1)(b) GDPR).
• Keeping the service secure and working: legitimate interest (Art. 6(1)(f) GDPR).
• Payment processing: performance of a contract, and legal obligations on the provider.

Your rights

You can request access to, correction of, or deletion of your data, and you can object to processing based on legitimate interest. You can also export the data held for a case from the workspace itself. Write to the contact address above; you also have the right to complain to a data-protection supervisory authority.

Retention

Case data is kept for as long as it is needed to provide the report and to meet statutory record-keeping obligations. Specific periods are set by the operator; ask the contact above if you need them in writing for a particular case.