Privacy
Controller
Mücahid Selman Yildizhan, Eilbeker Weg 73, 22089 Hamburg, Germany. Contact: epochcreationservice@gmail.com. This notice covers Epoch, Discover, online tools and downloadable HTML betas.
Sign-in and profile
Sign-in uses OpenAI’s ChatGPT. The application receives an account identifier and, where provided, email and name. The identifier associates owned records. Email is not shown publicly and may verify preconfigured moderation rights. You choose public name, username and bio. Requested account functions are provided under GDPR Article 6(1)(b).
Public and private content
Published posts, ADL context, sources, images with descriptions, replies and profiles are readable without sign-in. Reactions and follows are stored; counts appear in feed/profiles. Drafts and saved online graphs are accessible only to their account. Creation/update times are stored. Do not publish confidential or unauthorised third-party data.
Local programs and online storage
HTML betas and imports process data in the open tab. Import alone uploads nothing to our server. JSON export writes a device file. In the online tool, Save sends graph, title, elements, relations, notes, sources and times to your account. Epoch image uploads are stored server-side. Unpublished images remain account-only.
Hosting, cookies and external services
Hosting uses OpenAI Sites and Cloudflare delivery, database and file infrastructure. IP address, requested path and time may be processed for secure delivery under GDPR Article 6(1)(f). Sign-in uses necessary session cookies. Your selected language is stored in epoch_lang for up to six months. The app uses no ad trackers, external fonts or optional analytics cookies. External sources are visited only when opened.
Recipients and international hosting
OpenAI and Cloudflare infrastructure process data for delivery. Processing may occur outside the EU/EEA; exclusively German storage is not promised. Provider privacy information is linked below. Contact the controller about specific processing and transfer safeguards.
Retention and deletion
Profile, drafts, posts and uploaded images remain until deletion. You can delete individual posts. Delete profile data removes the new profile’s posts, replies, follows, uploads and saved online graphs. Export is available first. Others may previously have copied public content. Legacy data was preserved during rebuilding and is reviewed/erased on request, subject to legal retention.
Contact, moderation and rights
Emails/notices are used to handle your request. Moderation may record reason, content ID, acting account and time for accountable handling based on secure-operation interests and applicable legal duties. GDPR rights include access, rectification, erasure, restriction, portability and objection to Article 6(1)(f) processing. You may complain to a supervisory authority, such as Hamburg’s data protection commissioner.