Privacy Policy

Privacy Policy

Last updated: 28 August 2026

Pubvera is a small, independently run set of research tools. This page describes exactly what the service stores, what it deliberately does not store, and which third parties process data on its behalf. It is written to be checked against the software rather than to sound reassuring.

Who is responsible

Pubvera is operated by an individual developer based in Romania. For any question about this policy, or to exercise any of the rights described below, write to [email protected].

What Pubvera stores

You can use the public search tools without an account. If you sign in with Google, the following is stored:

DataWhy
Email addressIdentifies your account and is how you are contacted about it
Account identifierLinks your account to your plan and usage
Plan and sign-up dateDetermines what your plan includes and when a trial ends
One row per analysis: which app, which AI model, how many tokens, what it cost, and whenEnforces the usage allowance included in your plan

That is the complete list. No name, no profile photo, no contact list, and no Google data beyond the email address are requested or received.

What Pubvera does not store

Your search text is not saved. What you type into an analysis is sent to the AI provider to produce the answer, and is then gone. There is no field anywhere in the database that holds it, so it cannot be read back, exported, or disclosed — not to anyone, and not to the operator.

Your own API key is not saved. If you supply your own provider key, it travels with that one request, is held in memory for the single call it pays for, and is never written to disk or to the database. It is also stripped from the environment of every helper process the server runs.

Analytics and cookies

Pubvera runs no analytics. There is no Google Analytics, no Plausible, no tracking pixel, and no advertising script on any page of the site or in any of the eight apps.

The only cookies and browser storage used are the ones that keep you signed in after you log in with Google. If you never sign in, nothing is stored in your browser by Pubvera.

Note that the hosting providers below still see ordinary connection information — your IP address, browser type and the time of the request — in their server logs, as any website host does. That is a technical necessity of serving a page, not something Pubvera collects or analyses.

Who else processes your data

Pubvera relies on the following services. Each one is used for a single, specific purpose:

ServiceWhat it handlesWhere
GoogleSign-in. Google confirms your identity and shares your email addressGlobal
SupabaseStores the account data listed aboveFrankfurt, Germany (EU)
DeepSeekReceives the text of an analysis and returns the AI verdictChina
AnthropicSame, when you choose a Claude modelUnited States
HetznerRuns the servers the apps are hosted onGermany (EU)
CloudflareServes the site and protects it from abuseGlobal

Sending an analysis abroad. When an analysis runs, its text leaves the EU: DeepSeek processes it in China, Anthropic in the United States. If that matters for the material you are working with, do not put confidential or personal information into an analysis — the public research question is all the tool needs.

How long data is kept

Ask by email and your account and its usage rows will be deleted.

Your rights

Under the GDPR you may ask for a copy of your data, ask for it to be corrected or deleted, object to its processing, or complain to a supervisory authority. In Romania that authority is the ANSPDCP. Write to the address above and you will get an answer within one month.

Security

All traffic uses HTTPS. Account data is protected by row-level security, so one account cannot read another's rows. Secrets are held in environment variables readable only by the server process, never in the page source and never in a public code repository.

No system is beyond compromise. If something goes wrong that affects you, you will be told.

Children

Pubvera is a research tool for adults and is not directed at children under 16. No account is knowingly created for one.

Changes to this policy

If this policy changes, the date at the top changes with it. A change that affects what is stored or who receives it will be announced by email to registered users before it takes effect.