Privacy policy

This policy explains what personal data AngryRobot Labs s. r. o. (“we”, “us”) collects when you visit www.angryrobot.eu, why we collect it, and the rights you have over it. It covers this website only. Our scanning product at scan.angryrobot.eu has its own separate notice.

We are the data controller for the processing described here, within the meaning of the EU General Data Protection Regulation (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.

Our approach, in short

This is a small site and we keep data collection to what the site actually needs. We do not sell personal data, we do not run advertising, and we do not build profiles of visitors. Analytics load only if you agree to them. The interactive demo removes personal details in your browser before anything is sent, and keeps nothing you type.

What we process, and why

1. Visiting the site

Our web server records ordinary technical information about each request: your IP address, the date and time, the page requested, the referring page, and your browser’s user agent. These records let us keep the site running, diagnose faults and protect it from abuse.

• Legal basis: our legitimate interest in operating and securing the site (GDPR Art. 6(1)(f)).
• Retention: these logs are rotated automatically and kept for about 14 days, then deleted.

Traffic to the site passes through Cloudflare, which acts as a security and delivery layer and processes the same connection data on our behalf.

2. Analytics — only with your consent

If you accept analytics in the cookie notice, we use Google Analytics to understand how the site is used — which pages are visited, roughly where visitors come from, and how they move through the site. This sets two cookies (_ga and _ga_7EJCWW7H5C) and sends usage data to Google. If you decline, or ignore the notice, none of this loads and no such cookie is set.

• Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
• Processor: Google Ireland Limited. Data may be transferred to Google servers outside the EU under the safeguards Google provides.
• Retention: as configured in Google Analytics; the cookies expire within two years, sooner if you clear them.

3. Contacting us

When you send a message through the contact form, we receive the name, email address and message you enter. We use them only to read and answer your enquiry. The message is delivered to our inbox by email; we do not keep a separate copy in a database on this site.

• Legal basis: taking steps at your request before any possible engagement, and our legitimate interest in responding to enquiries (GDPR Art. 6(1)(b) and (f)).
• Processor: Brevo (Sendinblue), which delivers the email on our behalf.
• Retention: for as long as we need to handle your enquiry and any reasonable follow-up, after which we delete it.

To limit spam and abuse, the form briefly stores a one-way hash of your IP address as a counter. It cannot be read back to identify you and is discarded within hours.

4. The live demonstration

The case-study page includes a demonstration where you can submit a piece of text for automated analysis. Before anything leaves your browser, obvious personal details — names, email addresses, phone numbers, payment card and bank account numbers — are removed and replaced with markers. Only that redacted text is sent for analysis, and a second removal pass runs on our server as a safeguard.

We do not store or log the text you submit, or the result. Processing is carried out by Anthropic PBC (United States), our analysis provider, and is not used to train their models. Please still avoid pasting anything genuinely confidential — the demo is there to show a method, not to handle real data.

• Legal basis: your consent, given by choosing to run the demo (GDPR Art. 6(1)(a)).
• Retention: none by us. Built-in example texts are cached to save cost; text you type yourself is not.

Cookies and local storage

We keep this deliberately small:

• _ga, _ga_7EJCWW7H5C — Google Analytics, set only after you accept. Used to distinguish visitors and sessions.
• cookie_consent — not a cookie but a value stored in your browser, remembering whether you accepted or declined analytics so we do not ask again. It contains no personal data.

Nothing else is set without your consent. To change your choice, clear this site’s data in your browser and the notice will appear again on your next visit.

Who we share data with

We do not sell or trade personal data. We rely on a small number of service providers who process data on our behalf, under contract and only on our instructions:

• Cloudflare — security and content delivery for the whole site.
• Google (Google Analytics) — usage analytics, only with your consent.
• Brevo (Sendinblue) — delivery of contact-form emails.
• Anthropic — automated analysis for the demonstration, on redacted text only.

Some of these providers operate outside the European Economic Area. Where that is the case, the transfer is covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses. We may also disclose data where the law requires it.

Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we process it;
• receive data you gave us in a portable form;
• withdraw any consent you have given, at any time, without affecting what was lawful beforehand.

To exercise any of these, contact us through the contact form. We will respond within one month.

If you believe we have handled your data improperly, you may also lodge a complaint with the Slovak supervisory authority, the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky).

Security

The site is served only over encrypted HTTPS connections. Access to the systems behind it is restricted, and the interactive parts of the site are rate-limited and validated to resist abuse. No system is perfectly secure, but we take reasonable measures proportionate to the limited data involved.

Changes to this policy

We may update this policy as the site changes. When we do, we will revise the date at the top. Material changes will be made clear on this page.

Contact

For any question about this policy or about how we handle your data, reach us through the contact form. We are AngryRobot Labs s. r. o., IČO 57648131, with our registered seat in Košice, Slovakia.