Who is responsible
dataready is a free service of Innovate d.o.o., Ljubljana, Slovenia. We are the controller of the personal data described here. Questions, requests and complaints: bruno@innovate.si.
How the service works, in data terms
When you test a page, our server hands your coding agent a brief describing a simulated person. Your agent opens the page with its own tools, answers as that person and sends the answers back. We do not browse your machine, read your repository or receive your files. The answers are checked on arrival: email addresses and long numbers are blanked, and query strings are removed from addresses.
If you ask for a text snapshot because your tool has no browser, our server fetches that one public page and returns its visible text inside the brief. The snapshot is not stored. Pages on private networks or behind a login are refused.
The App Profile and the synthetic community run in the dataready app on your own computer. It reads your project folder there, read-only, and keeps what it makes in a .dataready folder inside the project. It contacts us only to sign you in and to download its know-how (how to read an app and how to score it). Your code, your App Profiles and your communities are never sent to us. The app keeps its sign-in in your user settings folder on that computer, readable only by your user; signing out deletes it.
The briefs tell your agent never to enter real personal data, never to pay and never to log in with real credentials. Please do not include personal data in the pages, goals or steps you ask us to test.
What we keep, and for how long
| What | Why | How long |
|---|---|---|
| Your email address, and a contact record created when you connect (the name your tool reports, the date) | To sign you in with a one-time link, to send you your report links, and to know who uses the service (legitimate interest, Art. 6(1)(f) GDPR; the sign-in itself is part of providing the service, Art. 6(1)(b)) | 3 years from your last sign-in, or until you ask us to delete it |
| Sign-in tokens and the one-time sign-in link or code | To keep your tool connected without a password | The link and code expire within minutes; access tokens after 24 hours; refresh tokens after 90 days |
| Test results: the tested address without its query string, which persona was used, the persona's answers and scores, and the report page with its access code | So the report page works and you can come back to it | 7 days, then deleted automatically |
| Agent proposals: the persona text, your email, your name if you gave it, your note to the reviewer | To review the proposal and tell you the decision | 48 hours if a proposal from the form is never confirmed; otherwise 30 days. A rejected proposal's persona text is dropped at the decision |
| Approved agents: the persona text, and your name only if you asked for credit | To show the person in the public directory and use them in tests | Until removed. Your email is never shown and is not kept with the agent |
| App profiles and synthetic communities, their simulations, results and dashboards | They are made and kept by the dataready app on your computer | Stored on your computer in the .dataready folder of your project, never sent to us. Delete the folder to delete them |
| Know-how downloads by the dataready app on your computer: which pack and version, and when | To serve the right version of the know-how and to stop abuse | Counters only: day totals per pack with no account in them (up to 400 days), and a per-account rate-limit counter for one hour |
| Rate-limit counters (a one-way hash of your account or network address) | To stop abuse | Between one minute and one day |
| Anonymous page counts: page path, event name (for example a copied install line), and where a visit came from | To know which pages help | Day totals only, kept up to 400 days. No cookie, no IP address, no identifier is stored |
Emails
We send emails only for the service: your sign-in link and code, a short how-to when you first connect, the link and access code of each report you create, and, if you propose an agent, a confirmation and the decision. No newsletter, no marketing lists.
Cookies and browser storage
This site sets no cookies unless Google Analytics is switched on and you click Allow in the banner. Until then analytics runs without cookies, or not at all. You can change your mind any time with Cookie settings; saying no deletes the analytics cookies.
The site keeps a few small notes in your browser's own storage, never sent to us: your cookie choice (dataready.consent.v1) and the tool you last picked in the install box (dr.host).
Two strictly necessary cookies exist on mcp.dataready.si, not on this site: one that ties a sign-in link to the browser that asked for it, for a few minutes, and one that remembers you entered a report's access code, for that report only.
Anonymous counts
Because most visitors never click Allow, each page also sends a tiny anonymous signal to our server: the page path, an event name (such as "view" or "install copied") and, on arrival, a coarse source such as "google" or "direct". The server adds one to a daily total and keeps nothing else: no cookie, no IP address, no identifier. A short-lived one-way hash of the network address, valid for one minute, protects the counter against floods.
Who helps us
| Service | What it does for us | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts this site and the MCP server, stores the records above | Global edge network; EU Standard Contractual Clauses |
| Resend, Inc. | Sends the sign-in, report-link and proposal emails | United States; EU Standard Contractual Clauses |
| Google Ireland Ltd. (Google Analytics) | Visit statistics, only if analytics is switched on and you click Allow | EU / United States; EU-US Data Privacy Framework |
We do not sell personal data and do not share it with anyone else, except where the law requires it.
Your rights
You can ask for a copy of your data, its correction or deletion, a restriction of processing, data portability, and you can object to processing based on legitimate interest. Write to bruno@innovate.si; we answer within one month. Deleting your contact record also ends your sign-in. You may also complain to the Slovenian data protection authority, the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si), or the authority where you live.
About the personas
The people in the directory are fictional: invented first names with an initial, built from types, never real individuals. Their answers are simulations and are not data about any real person.
Changes
If what we keep changes, this page changes first, with a new date at the top.