config/privacy.html

314 lines
No EOL
14 KiB
HTML

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<title>Privacy Policy — SnapAPI | Screenshot API for Developers</title>
<meta name="description" content="Privacy policy and data protection information for SnapAPI — Screenshot API service by Cloonar Technologies GmbH, Austria.">
<link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>📸</text></svg>">
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&display=swap" rel="stylesheet">
<style>
*{box-sizing:border-box;margin:0;padding:0}
:root{
--bg:#0a0e17;--bg2:#0f1420;--card:#141a28;--card-hover:#1a2235;
--border:#1e2a3f;--border-light:#2a3752;
--text:#f0f2f7;--text-secondary:#94a3c0;--muted:#6b7a96;
--primary:#4f8fff;--primary-light:#6da3ff;--primary-dark:#3a6fd8;--primary-glow:rgba(79,143,255,0.15);
--accent:#10b981;--accent-glow:rgba(16,185,129,0.15);
--purple:#a78bfa;--orange:#f59e0b;--pink:#ec4899;
--gradient:linear-gradient(135deg,#4f8fff 0%,#a78bfa 50%,#ec4899 100%);
--radius:12px;--radius-lg:16px;--radius-xl:24px;
}
html{scroll-behavior:smooth}
body{font-family:'Inter',system-ui,sans-serif;background:var(--bg);color:var(--text);line-height:1.6;-webkit-font-smoothing:antialiased}
a{color:var(--primary-light);text-decoration:none;transition:color .2s}
a:hover{color:var(--primary)}
::selection{background:var(--primary);color:#fff}
.container{max-width:1180px;margin:0 auto;padding:0 24px}
.legal-container{max-width:800px;margin:0 auto;padding:0 24px}
.section{padding:100px 0}
.section-title{font-size:2.5rem;font-weight:800;line-height:1.2;margin-bottom:16px}
.section-subtitle{font-size:1.1rem;color:var(--text-secondary);max-width:600px;line-height:1.7}
.text-center{text-align:center}
.text-center .section-subtitle{margin:0 auto}
.btn{display:inline-flex;align-items:center;gap:8px;padding:12px 28px;border-radius:10px;font-weight:600;font-size:.95rem;border:none;cursor:pointer;transition:all .2s;font-family:inherit}
.btn-secondary{background:rgba(255,255,255,0.06);color:var(--text);border:1px solid var(--border)}
.btn-secondary:hover{background:rgba(255,255,255,0.1);border-color:var(--border-light);color:#fff}
nav{position:sticky;top:0;z-index:100;background:rgba(10,14,23,0.85);backdrop-filter:blur(20px);border-bottom:1px solid rgba(30,42,63,0.5);padding:0 24px}
.nav-inner{max-width:1180px;margin:0 auto;display:flex;align-items:center;justify-content:space-between;height:64px}
.nav-logo{font-size:1.15rem;font-weight:800;display:flex;align-items:center;gap:8px;color:var(--text)}
.nav-logo span{background:var(--gradient);-webkit-background-clip:text;-webkit-text-fill-color:transparent;background-clip:text}
.nav-links{display:flex;gap:32px;align-items:center}
.nav-links a{color:var(--muted);font-size:.9rem;font-weight:500;transition:color .2s}
.nav-links a:hover{color:var(--text)}
.legal-content{padding:60px 0}
.legal-content h1{font-size:2.2rem;font-weight:800;margin-bottom:24px;text-align:center}
.legal-content h2{font-size:1.4rem;font-weight:700;margin:32px 0 16px 0;color:var(--primary-light)}
.legal-content h3{font-size:1.1rem;font-weight:600;margin:24px 0 12px 0}
.legal-content p{margin-bottom:16px;color:var(--text-secondary);line-height:1.7}
.legal-content ul,.legal-content ol{margin:16px 0 16px 24px;color:var(--text-secondary)}
.legal-content li{margin-bottom:8px;line-height:1.7}
.legal-content strong{color:var(--text);font-weight:600}
.legal-box{background:var(--card);border:1px solid var(--border);border-radius:var(--radius-lg);padding:32px;margin:32px 0}
footer{border-top:1px solid var(--border);padding:48px 24px 32px;background:var(--bg2)}
.footer-grid{max-width:1180px;margin:0 auto;display:grid;grid-template-columns:2fr 1fr 1fr 1fr;gap:40px;margin-bottom:40px}
.footer-brand h4{font-size:1.1rem;font-weight:800;margin-bottom:12px;display:flex;align-items:center;gap:8px}
.footer-brand p{color:var(--muted);font-size:.85rem;line-height:1.6;max-width:280px}
.footer-col h5{font-size:.8rem;font-weight:700;text-transform:uppercase;letter-spacing:1.5px;color:var(--muted);margin-bottom:16px}
.footer-col a{display:block;color:var(--text-secondary);font-size:.88rem;padding:4px 0;transition:color .2s}
.footer-col a:hover{color:var(--text)}
.footer-bottom{max-width:1180px;margin:0 auto;padding-top:24px;border-top:1px solid var(--border);display:flex;justify-content:space-between;align-items:center;flex-wrap:wrap;gap:12px;font-size:.8rem;color:var(--muted)}
@media(max-width:900px){
.footer-grid{grid-template-columns:1fr 1fr}
.legal-content h1{font-size:1.8rem}
}
@media(max-width:640px){
.legal-content{padding:40px 0}
.legal-content h1{font-size:1.6rem}
.legal-content h2{font-size:1.2rem}
.footer-grid{grid-template-columns:1fr}
.nav-links{display:none}
}
</style>
</head>
<body>
<nav>
<div class="nav-inner">
<a href="/" class="nav-logo">📸 <span>SnapAPI</span></a>
<div class="nav-links">
<a href="/#features">Features</a>
<a href="/#playground">Try It Free</a>
<a href="/#pricing">Pricing</a>
<a href="/docs">API Docs</a>
</div>
</div>
</nav>
<section class="legal-content">
<div class="legal-container">
<h1>Privacy Policy</h1>
<div class="legal-box">
<h2>Data Controller</h2>
<p><strong>Cloonar Technologies GmbH</strong><br>
Linzer Straße 192/1/2<br>
1140 Wien, Austria<br>
Email: <a href="mailto:privacy@cloonar.com">privacy@cloonar.com</a></p>
<p>This privacy policy applies to the SnapAPI service provided at <a href="https://snapapi.eu">https://snapapi.eu</a>.</p>
<p><strong>Last updated:</strong> February 19, 2026</p>
</div>
<div class="legal-box">
<h2>1. Data We Collect</h2>
<h3>Account Data</h3>
<ul>
<li><strong>Email address:</strong> Required for account creation and API key management</li>
<li><strong>Payment information:</strong> Processed by Stripe (not stored on our servers)</li>
<li><strong>Usage data:</strong> API call counts, timestamps, subscription status</li>
</ul>
<h3>Technical Data</h3>
<ul>
<li><strong>IP addresses:</strong> Logged for security, rate limiting, and SSRF protection</li>
<li><strong>URLs submitted:</strong> The URLs you request to be captured (not stored permanently)</li>
<li><strong>Request metadata:</strong> API endpoints called, response codes, processing time</li>
<li><strong>Error logs:</strong> Technical errors for debugging (no personal data)</li>
</ul>
<h3>What We DON'T Collect</h3>
<ul>
<li><strong>Screenshots:</strong> Generated images are returned to you immediately and not stored</li>
<li><strong>Cookies:</strong> Only essential session cookies for account management</li>
<li><strong>Analytics:</strong> No third-party analytics, tracking pixels, or behavioral tracking</li>
</ul>
</div>
<div class="legal-box">
<h2>2. Legal Basis & Purposes</h2>
<h3>Contractual Necessity (Art. 6(1)(b) GDPR)</h3>
<ul>
<li>Processing API requests and generating screenshots</li>
<li>Account management and authentication</li>
<li>Billing and subscription management</li>
<li>Customer support</li>
</ul>
<h3>Legitimate Interests (Art. 6(1)(f) GDPR)</h3>
<ul>
<li>Security monitoring and fraud prevention</li>
<li>Rate limiting and abuse prevention</li>
<li>Service optimization and technical improvements</li>
<li>SSRF protection (blocking internal network access)</li>
</ul>
<h3>Legal Compliance (Art. 6(1)(c) GDPR)</h3>
<ul>
<li>Tax and accounting records (Austrian business law)</li>
<li>Data retention for legal purposes</li>
</ul>
</div>
<div class="legal-box">
<h2>3. Data Sharing & Third Parties</h2>
<h3>Service Providers</h3>
<ul>
<li><strong>Hetzner Cloud (Germany):</strong> EU hosting infrastructure</li>
<li><strong>Stripe:</strong> Payment processing (GDPR compliant)</li>
</ul>
<h3>What We Never Share</h3>
<ul>
<li>Personal data with advertisers or data brokers</li>
<li>Usage patterns or analytics data</li>
<li>Customer lists or contact information</li>
<li>Any data outside the European Union</li>
</ul>
<p>All data processing happens exclusively within the EU. No data transfers to third countries.</p>
</div>
<div class="legal-box">
<h2>4. Data Retention</h2>
<h3>Active Accounts</h3>
<ul>
<li><strong>Account data:</strong> Kept while your account is active</li>
<li><strong>Usage logs:</strong> 12 months for billing and support</li>
<li><strong>Payment records:</strong> 7 years (Austrian tax law)</li>
</ul>
<h3>Deleted Accounts</h3>
<ul>
<li><strong>Personal data:</strong> Deleted within 30 days of account closure</li>
<li><strong>Anonymized data:</strong> Usage statistics (no personal identifiers)</li>
<li><strong>Legal records:</strong> Tax records retained per legal requirements</li>
</ul>
<h3>Request Data</h3>
<ul>
<li><strong>Screenshots:</strong> Generated and returned immediately, never stored</li>
<li><strong>URLs requested:</strong> Temporarily processed, not permanently stored</li>
<li><strong>IP addresses:</strong> Logged for 30 days for security purposes</li>
</ul>
</div>
<div class="legal-box">
<h2>5. Your Rights (GDPR)</h2>
<p>You have the following rights regarding your personal data:</p>
<ul>
<li><strong>Access:</strong> Get a copy of your personal data</li>
<li><strong>Rectification:</strong> Correct inaccurate data</li>
<li><strong>Erasure:</strong> Delete your account and personal data</li>
<li><strong>Portability:</strong> Export your data in a machine-readable format</li>
<li><strong>Restriction:</strong> Limit processing of your data</li>
<li><strong>Objection:</strong> Object to processing based on legitimate interests</li>
<li><strong>Withdraw consent:</strong> Where processing is based on consent</li>
</ul>
<p>To exercise these rights, contact us at <a href="mailto:privacy@cloonar.com">privacy@cloonar.com</a>. We'll respond within 30 days.</p>
<p>You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).</p>
</div>
<div class="legal-box">
<h2>6. Security</h2>
<ul>
<li><strong>Encryption:</strong> All data in transit uses TLS 1.3</li>
<li><strong>EU hosting:</strong> All servers located in Germany (Hetzner Cloud)</li>
<li><strong>Access control:</strong> Minimal access on need-to-know basis</li>
<li><strong>SSRF protection:</strong> Automatic blocking of internal network requests</li>
<li><strong>Rate limiting:</strong> Prevents abuse and ensures service availability</li>
<li><strong>No data exports:</strong> Zero data transfers outside the EU</li>
</ul>
</div>
<div class="legal-box">
<h2>7. Cookies</h2>
<p>We use minimal cookies:</p>
<ul>
<li><strong>Session cookies:</strong> Essential for account login (deleted when you close browser)</li>
<li><strong>No tracking:</strong> No advertising, analytics, or third-party cookies</li>
<li><strong>No consent required:</strong> Only essential cookies used</li>
</ul>
</div>
<div class="legal-box">
<h2>8. Children's Privacy</h2>
<p>SnapAPI is not intended for use by children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided personal data, please contact us and we will delete it immediately.</p>
</div>
<div class="legal-box">
<h2>9. Changes to This Policy</h2>
<p>We may update this privacy policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via email. Continued use of the service constitutes acceptance of the updated policy.</p>
</div>
<div class="legal-box">
<h2>10. Contact</h2>
<p><strong>Data Protection Contact:</strong><br>
<a href="mailto:privacy@cloonar.com">privacy@cloonar.com</a></p>
<p><strong>General Contact:</strong><br>
<a href="mailto:info@cloonar.com">info@cloonar.com</a></p>
<p><strong>Postal Address:</strong><br>
Cloonar Technologies GmbH<br>
Linzer Straße 192/1/2<br>
1140 Wien, Austria</p>
</div>
<div style="text-align:center;margin-top:48px">
<a href="/" class="btn btn-secondary">← Back to SnapAPI</a>
</div>
</div>
</section>
<footer>
<div class="footer-grid">
<div class="footer-brand">
<h4>📸 SnapAPI</h4>
<p>The EU-hosted screenshot API for developers. Convert any URL to a pixel-perfect image with a simple API call.</p>
</div>
<div class="footer-col">
<h5>Product</h5>
<a href="/#features">Features</a>
<a href="/#pricing">Pricing</a>
<a href="/#playground">Playground</a>
<a href="/docs">API Docs</a>
</div>
<div class="footer-col">
<h5>Developers</h5>
<a href="/docs">Swagger / OpenAPI</a>
<a href="/#docs">Quick Start</a>
<a href="/health">Status</a>
</div>
<div class="footer-col">
<h5>Legal</h5>
<a href="/impressum">Impressum</a>
<a href="/privacy">Privacy Policy</a>
<a href="/terms">Terms of Service</a>
</div>
</div>
<div class="footer-bottom">
<span>© 2026 Cloonar Technologies GmbH · FN 631089y · ATU81280034</span>
<span>Linzer Straße 192/1/2, 1140 Wien, Austria 🇦🇹</span>
<span>EU-hosted 🇪🇺 · All data stays in Europe</span>
</div>
</footer>
</body>
</html>