Privacy Policy

Effective date: July 27, 2026 · Last updated: September 29, 2026

Emberfeed is a hosted service that renders designed product images for e-commerce catalog feeds, operated by Daniel Šilha, registered sole trader (IČO 05377595) ("we", "us"). This policy explains what personal data we collect when you use emberfeed.com, why we collect it, and the rights you have over it. We keep it short because we collect little.

Who is responsible (data controller)

The data controller is Daniel Šilha, sole trader registered in the Czech Trade Licensing Register (živnostenský rejstřík), IČO 05377595, Letenské náměstí 76/3, 170 00 Prague 7, Czech Republic. For anything related to your data, contact us at hello@emberfeed.com.

What we collect and why

  • Account data — your e-mail address, display name and password (stored only as a modern salted hash, never in plain text). Legal basis: performance of the contract — we need it to run your account.
  • Session security data — for each active login session we record the IP address and browser identifier (user-agent). You can see and revoke your active sessions in your account settings; this data is deleted together with the session. Legal basis: legitimate interest in keeping accounts secure.
  • Feed and catalog content — the feed URL you import and the product data it contains (titles, prices, images), plus templates, uploaded assets and fonts you add. Product catalogs normally contain no personal data; we process this content solely to provide the service. For each feed we also record which ad platform (Meta, Google, TikTok) fetched it and when, so we can show you whether it is connected; we do not store the platform's IP address or browser data. Legal basis: performance of the contract.
  • E-mails we send you — we keep a record of which onboarding and trial e-mails were sent to your account, and your opt-out preference. Legal basis: our legitimate interest in onboarding our own users, within the limits of Czech Act No. 480/2004 Coll. §7(3): the e-mails concern only our own similar services, and you can refuse them both at registration and via the unsubscribe link in every message. Transactional e-mails (such as password resets) are sent as part of the contract and are unaffected by the opt-out.
  • Upgrade requests — if you submit the upgrade form, we store your name, e-mail and message so we can respond. Legal basis: steps prior to entering a contract.
  • Billing data — if you upgrade, we process the details needed to invoice you (name, billing address, company/VAT ID, payment records). Legal basis: performance of the contract and our legal obligations under Czech tax and accounting law.
  • Server logs — like almost every web service, our infrastructure keeps short-lived access logs (IP address, requested URL, timestamp) for security and troubleshooting. Legal basis: legitimate interest.

Providing your e-mail address, a display name and a password is a contractual requirement — without them we cannot create or operate your account. Everything else (the upgrade-form message, uploaded assets) is up to you.

Cookies

We set exactly one cookie ourselves: __Host-mf_session, a strictly necessary, httpOnly cookie that keeps you signed in. Our CDN and security provider (Cloudflare, including the Turnstile bot check on registration) may set its own strictly necessary security cookies; these are not used for tracking or advertising. We set no advertising, preference or cross-site tracking cookies — which is why you see no cookie banner here.

Inside the app, your browser's local storage remembers one thing: that you dismissed the feed-health banner. It stays in your browser and is never sent to us.

Analytics

On our public pages — the homepage, blog, guides and legal pages, never the app you sign in to — we count visits with a self-hosted instance of Umami. It sets no cookies and shares nothing with third parties. For each page view it records the page address (without query parameters), the referring site, your browser, operating system, device type and the country derived from your IP address. The IP address itself is not stored, and neither are your screen size or language. Page views from the same browser are grouped by a one-way hash that changes every month, so we can count visits without recognising you from one month to the next or on other sites. On the same pages we count clicks on the sign-up buttons, with the page and the button's position. When you create an account, one "signup" event is counted too; it carries no page address beyond the registration page, no referring site and nothing you typed. If your browser sends Do Not Track, nothing is recorded. Legal basis: our legitimate interest in understanding how the public site is used.

Who else touches the data (processors)

  • Hetzner Online GmbH (Germany) — server hosting. All application data lives in its data centre in Helsinki, Finland (EU).
  • Cloudflare, Inc. (USA) — CDN, DDoS protection and the Turnstile bot check in front of the site. Transfers are covered by the EU-US Data Privacy Framework and standard contractual clauses. When you register, Turnstile looks at your IP address and browser signals (such as the user-agent) to tell people from bots; Cloudflare does this as our processor, and as an independent controller when it uses those signals to improve its bot detection.
  • Seznam.cz, a.s. (Czech Republic) — e-mail: the messages we send you and our support inbox. The data stays in the EU.

We do not sell personal data and we do not share it with advertisers. You can request a copy of the applicable transfer safeguards (e.g. the standard contractual clauses) at hello@emberfeed.com; the EU-US Data Privacy Framework participant list is at dataprivacyframework.gov.

AI assistants you connect

Emberfeed runs an MCP server so that AI assistants, for example Claude by Anthropic or Muse by Meta, can work with your account. Nothing reaches an assistant unless you connect it yourself: by signing in to Emberfeed from the assistant, or by giving it an API key you created on your API keys page.

Once connected, the assistant receives what its requests ask for, and only from your account: feeds, products, rules, templates, validation results and rendered previews. When you ask it to, it can also change feeds, rules and templates, which we store like any change you make in the dashboard; it cannot delete anything. Legal basis: performance of our contract with you.

We do not store your prompts or your conversations with the assistant. For each connection we keep its name and when it was created and last used, and for your account a count of MCP requests (a number, no content). A connection lasts until you revoke it on the API keys page, which cuts access immediately. Removing Emberfeed inside the assistant does not revoke it on our side.

The assistant's provider receives this data under its own terms and privacy policy — as your processor or as a separate controller, depending on your agreement with that provider — and never as our processor, so read those terms before you connect. For users in the EEA the provider is usually its EU entity (for Claude, Anthropic Ireland, Limited); any processing it does outside the EU is covered by that provider's own safeguards.

How long we keep it

  • Security log — sign-ins and failed attempts, password and API-key changes, connected-app approvals, admin changes to your account and changes an AI assistant makes through our MCP server, each with the IP address and browser: 12 months; the IP address is shortened to its network after 90 days. Legal basis: our legitimate interest in protecting your account and investigating abuse.
  • Account, feed and template data: for as long as your account exists. If you ask us to delete your account (hello@emberfeed.com), we delete your data within 30 days.
  • Sessions (incl. IP/user-agent): until they expire or you revoke them.
  • Server logs: rotated daily and deleted after at most 14 days.
  • Backups: daily database snapshots kept for 7 days, then overwritten — deleted data leaves the backup cycle automatically within that window.
  • Invoices and related tax records: for as long as Czech tax and accounting law requires (up to 10 years).

Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. E-mail hello@emberfeed.com and we will respond within one month; where a request is complex, the GDPR allows us to extend this by up to two further months — we would tell you within the first month if so. You can also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz) or your local supervisory authority.

We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.

Your customers' data

Product feeds normally contain products, not people. If a feed you import does contain personal data, you remain the controller of that data and we act as your processor, handling it only to provide the rendering service. Our data processing agreement applies automatically in that case; a countersigned copy is available on request.

Children

Emberfeed is a business tool for merchants and is not directed at children under 16.

Changes

If we make a material change to this policy, we will note it here with a new effective date and tell registered users by e-mail.

Questions? Write to hello@emberfeed.com — a human founder reads and answers every message. Back to Emberfeed.