Privacy

This page explains what Tuvilio records, why, for how long, who else handles it, and how to reach us.

Who runs the site

Tuvilio is run by Jan Krátký, the controller of the data described here. For any question about it, write to kratkyjan244@gmail.com.

What is recorded

Visits

For every request, the site's own log records the time, the address requested, the response status, the IP address and the name the visiting browser or program gives itself (its User-Agent and, if sent, its Signature-Agent header). For a confirmation or an order request it also records what happened, such as that an email was sent. These request records never store an email address: one given in a link's email parameter is kept only as a one-way hash, which cannot be turned back into the address but is the same for every request with that address, and any other text that looks like an email address is masked.

Google Cloud, which hosts the site, also keeps its own record of requests, including the full address requested, the IP address, the User-Agent and the referring page. The full address includes an email address, Telegram username or link code that a link carries.

If the site fails with an unexpected error, its log also records the error: where in the program it happened and its message, which can contain data from the request, such as an email address. Google Cloud's Error Reporting also keeps a record of the error.

Confirming an email address

When you enter an email address to confirm it, the site stores the address with a single-use code and emails a link with that code to the address. Opening the link confirms that the address is yours: the code is deleted and the address is stored as confirmed, with the time of the confirmation. A link that is not used expires after 24 hours.

Linking Telegram

If you press Start in the Tuvilio bot on Telegram, the site links your chat with the bot: it stores the chat's id, your Telegram username if you have one, a code it gives the chat, and when the chat was first linked. Each message you send the bot updates the stored username; the text of your messages is not stored, and the site's log names your chat only as a one-way hash.

Order requests

An order request can be sent only for a confirmed address or a linked Telegram chat. It is stored with the email address, the product, the time, the value an assistant may send with it to recognise a repeated request, and the kind of program that sent it as its User-Agent names it (for example a browser or a named AI assistant); its IP address is not stored with the order. The address then gets an email with the order code and the product's Amazon link. An order request for a Telegram username or code is stored the same way, with the chat's id instead of the address, and the chat gets a message with the order code and the product's Amazon link. Tuvilio sells nothing and never asks for payment or delivery details.

Limits against misuse

To limit how many emails and messages the site sends, it counts requests per network (IP) address, per email address or Telegram chat (each only as a one-way hash) and per day.

Why, and on what basis

• Sending the confirmation link and the order emails you ask for, linking your Telegram chat and sending it the messages you ask for, and keeping the confirmed address, the linked chat and the order requests they belong to: to provide the service you request (Article 6(1)(b) GDPR).
• The record of visits, the records of unexpected errors and the request counts, and looking at stored order requests to understand how visitors, including search engines and AI assistants, find and use the site: our legitimate interest in running the site, keeping it secure and free of misuse, and understanding its use (Article 6(1)(f) GDPR).
• When someone else enters your address, sending it the confirmation link and keeping it until the link expires: our legitimate interest in confirming that an address belongs to whoever uses it (Article 6(1)(f) GDPR).

Giving an email address or linking Telegram is up to you; without either the site cannot send you an order request.

How long

• The record of visits, ours and Google Cloud's: 30 days.
• An address waiting for confirmation: until its link is used, at most 24 hours.
• A confirmed address: 30 days from its confirmation. After that it has to be confirmed again before the next order request.
• A linked Telegram chat: 30 days from your last Start.
• Order requests: 30 days from the request.
• Request counts: until the end of their hour or day.
• The emails sent, with the address they went to, at Resend: 30 days.
• Records of unexpected errors, in Google Cloud's Error Reporting: 30 days.

When their time is up, records are deleted automatically: the site stops using them at once, and the database usually removes them within a day.

Who else handles the data

• Google Cloud hosts the site and keeps its database and its logs in Belgium. Google Cloud's Error Reporting is a global service and may keep its records of unexpected errors outside the EU; Google LLC is certified under the EU-U.S. Data Privacy Framework, and Google's data processing terms add the EU Standard Contractual Clauses for transfers the framework does not cover.
• Resend (Plus Five Five, Inc., San Francisco, United States) delivers the emails on our behalf. It is certified under the EU-U.S. Data Privacy Framework, which covers the transfer of the address and the email to the United States, and its data processing agreement adds the EU Standard Contractual Clauses.
• Messages between you and the Tuvilio bot pass through Telegram, where Telegram's own privacy policy applies.
• Product links lead to Amazon, where Amazon's own privacy notice applies.

Google Cloud and Resend handle the data only on our behalf and use subcontractors of their own to do so. We pass the data to no one else, and never sell it. No decisions about you are made by automated means.

Cookies

The site sets no cookies and runs no scripts or trackers.

Your rights

You can ask for access to data about you, for its correction or deletion, for its processing to be restricted, or for a copy of the data you gave in a common machine-readable format, and you can object to processing based on our legitimate interest, by writing to the address below. Stored addresses, Telegram links and order requests are deleted on request; entries in the logs and records of errors cannot be deleted one by one and expire after 30 days. You can also complain to a data protection authority; in the Czech Republic that is the Office for Personal Data Protection (ÚOOÚ).

Contact

For questions, or to have data about you deleted, write to Jan Krátký at kratkyjan244@gmail.com.