Privacy policy

This policy covers the Boring API at https://api.relaex-engineers.de, including its REST endpoints and the MCP server at https://api.relaex-engineers.de/mcp used by AI assistants such as Claude and ChatGPT.

Operator and contact

David Malczewski
Zechstraße 4, 81369 München, Germany
E-mail: david.malczewski@relaex-engineers.com

What the tools do with your files

Files you send (uploads, Base64, CSV text, or files we download from a URL you give) are processed in memory to produce the answer and are discarded when the request ends. They are not stored, not logged and not used for training.
When you pass a URL, the server downloads that file once for the request. Only public addresses are allowed.
All tools are read-only: they do not change, send or publish anything.

What is recorded

Usage counter: per call the time, tool, number of rows, duration, HTTP status and a request id, plus one identifier: the name of your API key if you use one, otherwise a salted hash of your IP address (or the MCP session id). No file contents. Rows older than 365 days are deleted automatically. Purpose: rate limiting, abuse prevention and knowing which tools are used.
Server access logs: the web server (Caddy) logs IP address, time, path, status and user agent for security and troubleshooting. The logs are size-limited and rotated; older entries are overwritten automatically.
No cookies, no tracking, no analytics, no advertising.

Service providers

The server runs at Hetzner Online GmbH in Germany (EU). DNS is provided by Netlify. When you use the tools through an AI assistant, that assistant's provider (for example Anthropic or OpenAI) also processes your conversation under its own privacy policy.

Legal basis and your rights

Processing is based on legitimate interest in providing a secure, working service (Art. 6(1)(f) GDPR) and, where you call the API on purpose, on providing the requested service (Art. 6(1)(b) GDPR). You may request access, rectification, erasure, restriction or object to processing, and you may complain to a data protection supervisory authority. Because we only store hashed IP addresses, we usually cannot link records to a person.

Terms of use

The tools are provided as is, without warranty. Results are computed deterministically and carry quality levels; check important decisions yourself. Do not send data you are not allowed to share. Fair use applies through rate limits.

Last updated: 6 October 2026.