Privacy Policy

1. Who is responsible

ozn.technology and the Ephemeral Code software are run by the operator of ozn.technology, a private individual based in Romania (“I”). I am the controller of the personal data described below. Contact: contact@ozn.technology.

I have not appointed a data protection officer; the law does not require one for this processing.

2. What this policy covers

(a) this website; (b) emails you send me, for example to request an invitation; (c) the Ephemeral Code software, which runs on your own computer (section 6).

There are no user accounts yet. I will update this policy before accounts launch.

3. Website: technical logs

When you visit the site, the hosting server and the Cloudflare network that sits in front of it process technical request data: your IP address, date and time, the page requested, your browser’s user-agent string and the response status.

• Purpose: to deliver the site, keep it secure and protect it against abuse and attacks.
• Legal basis: my legitimate interest in the security and operation of the site (Article 6(1)(f) GDPR; see Recital 49 GDPR). You can ask me for information about the balancing of interests I carried out.
• Retention: the logs on my own server are kept for 30 days, unless a specific log is needed longer to investigate a security incident. Cloudflare keeps its own logs under its own policy, which I do not control: www.cloudflare.com/privacypolicy

The site has no contact forms, no analytics, no advertising and no tracking, and I do not build profiles.

4. Emails you send me (including invitation requests)

The “Request an invitation” button opens your own email program. If you send an email, I receive your email address, any name you include, and the content of your message.

• Purpose: to reply to you and, if you asked for one, to manage your invitation.
• Legal basis: steps taken at your request before a possible contract (Article 6(1)(b) GDPR) for invitation requests; my legitimate interest in answering messages (Article 6(1)(f) GDPR) for other correspondence.
• Retention: until Ephemeral Code launches and then 12 months, after which the emails are deleted; earlier if you ask me to delete them.
• Giving me your email address is voluntary, but without it I cannot reply or send an invitation.

5. Who receives the data (processors) and international transfers

• Hetzner Online GmbH (hosting, servers in Germany, in the EU).
• Cloudflare, Inc. (content delivery, DDoS protection and email routing: messages to contact@ozn.technology pass through Cloudflare Email Routing, which forwards them to my mailbox). Cloudflare may process data in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which the European Commission found adequate on 10 July 2023; Cloudflare’s data processing terms also include the EU Standard Contractual Clauses.
• Google (Gmail), the mailbox that receives the emails Cloudflare forwards. Google may process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (status “Active” in the official register at dataprivacyframework.gov, checked on 15 October 2026), which the European Commission found adequate on 10 July 2023.

I do not sell personal data and I do not share it with anyone else, unless the law requires it.

6. Ephemeral Code (the software)

Ephemeral Code runs on your computer. It does not send telemetry, crash reports, usage data or update checks to ozn.technology, and I do not receive the data it processes. Its only network connections go to the model provider you configure and approve, or to a local model on your own machine.

• AI provider: before the shipped commands contact a model that is not on your computer, Ephemeral Code asks for your approval for that exact provider, address and model. When you run a task, it sends to the provider you approved, using your own API key: your task description, the content of files the agent reads or edits in the folder you chose, and information about the task’s progress and results (for example, whether tests passed). A model running locally (for example at 127.0.0.1) does not receive data over the internet. Your relationship with the AI provider is governed by that provider’s own terms and privacy policy. That provider, not me, decides how it handles what you send it.
• API key: Ephemeral Code reads your provider API key from your own environment or profile on your computer and sends it only to that provider.
• Local data: task history, approvals (consent records) and folder-trust settings are stored in your user profile on your computer. Error messages returned by the provider may be stored there as well. You can delete these files at any time.
• Download: if you install Ephemeral Code from the npm registry, npm processes your download under its own privacy policy.

7. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to data portability, and to object at any time to processing based on my legitimate interest (Articles 15–22 GDPR). To exercise them, write to contact@ozn.technology. I do not make automated decisions about you and I do not use profiling.

You can lodge a complaint with a supervisory authority, in particular in the EU country where you live or work or where the alleged infringement took place. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania, www.dataprotection.ro, anspdcp@dataprotection.ro.

8. Browser storage and cookies

The only thing this site itself stores in your browser is that you closed the cookie notice, for the current browser session. Cloudflare may set strictly necessary security cookies. Details: see the Cookie Policy at /cookies.

9. Changes

I will publish any change on this page and update the date above.