Privacy Policy

1. Controller

OpenShopGraph
Konrad Elias Fröhlich
c/o Online-Impressum #10008
Europaring 90
53757 Sankt Augustin
Deutschland
E-Mail: info@openshopgraph.com

Further details are in the legal notice (Impressum).

2. Visiting the website

The website and the interface are delivered through the Cloudflare network (Cloudflare, Inc., USA, as processor). When you open a page, Cloudflare processes technically necessary access data: IP address, time, requested address, browser identifier and the referring page. This serves delivery, troubleshooting and defence against attacks (Art. 6(1)(f) GDPR, legitimate interest in secure and fast operation). For transfers to the USA, Cloudflare relies on the EU-US Data Privacy Framework and EU standard contractual clauses. In addition, Cloudflare instructs your browser to send an error report (Network Error Logging: among other things address, type of error and your IP address) to Cloudflare when a connection fails; your browser sends nothing for successful requests. From this server-side access data Cloudflare also produces zone statistics for us; no page loads a script for it. Legal basis and recipient are the same.

3. No cookies, no audience measurement

This website sets no cookies and integrates no audience-measurement or advertising services. The only thing stored in your browser is the view you chose (light/dark) — a setting, not tracking. A performance measurement of our own for load times is prepared; it is currently switched off, no page loads its script, and nothing is stored. If switched on, for a random sample of 10 % of page views your browser would send our server, via a script from our server (/rum.js), for each measurement the type of measured value (LCP, INP, CLS or TTFB), the measured value itself, the page type (such as home page or shop page) and the network type reported by the browser (such as 4g). Our server would add the country derived from the IP address and the extrapolation factor of the sample and store the record in Cloudflare Workers Analytics Engine (Cloudflare as processor). Not stored would be the IP address, cookies, identifiers, the address of the visited page and the browser identifier. The purpose would be to detect slow pages (Art. 6(1)(f) GDPR). The same switch governs the counting of browser reports about violations of our security policy (/api/csp-report): its address is entered in every page header, but the server currently does not accept it and stores nothing. If switched on, it would count only the kind of violation and the page type, not the address of the page, not your IP address and not the browser identifier.

4. Logos and icons from third-party servers

On several pages, such as the home page, the shop directory and the shop pages, we show logos and icons of shops that your browser loads directly from third-party servers. Partly this is the server of the shop itself, but to a large extent it is the image server of its shop platform, such as Shopify (cdn.shopify.com), Wix (static.wixstatic.com), Automattic for WordPress (i0.wp.com) or BigCommerce (cdn11.bigcommerce.com). The recipients are the operators of these servers; for technical reasons they receive your IP address, the time and your browser identifier. For these images your browser does not send a referring page, so the server does not learn which of our pages you are viewing. Some of these providers are based outside the EU, for example in the USA. We have no influence on further processing by these providers. The legal basis is Art. 6(1)(f) GDPR (recognisable presentation of the shops). Shop pages with a redemption proof also show screenshots that your browser loads from our own image storage assets.openshopgraph.org; it runs at Cloudflare (section 2), which receives the same technical data there as described in section 2.

5. Copying and reporting coupon codes

If you copy a coupon code, your browser sends the code, the shop domain and the path of the page to our server; we store the time with it. If you report a code as not working, we store code, shop domain and time. In both cases we store no IP address, no cookie and no identifier — the entries cannot be attributed to a person. The purpose is to see which codes are used and which have expired (Art. 6(1)(f) GDPR). Against abuse, the server briefly counts requests per IP address in working memory; the IP address is not stored in the process. The entries are deleted after 90 days.

6. Interface (REST and MCP)

For requests to api.openshopgraph.com our own server logs, per request, the time, method, path, the name of the tool called, status, duration, the country derived from the IP address and where this information comes from, a hash value of the IP address and a request identifier assigned by us per request. For MCP requests, the name of the MCP method called (such as tools/call), the protocol version and, if sent, the session identifier are added (mcp-session-id, assigned by our server when the connection is set up); it links the calls of the same session. If the calling program sends its own request identifier (x-request-id), we log that too. The IP address itself and the arguments passed are not logged; for requests with an API token only its identifier, not the token. In front of our server runs a Cloudflare Worker (api-kante) which also writes one log line per request to the Cloudflare logs (Workers Logs): time, route and reason of the answer, status, duration and the location of the Cloudflare data centre. The IP address appears there only truncated (IPv4 to the /24 network, IPv6 to the /48 network), and of the program only a coarse class (such as curl, node or browser), not the full browser or program identifier. How long Cloudflare keeps these logs is decided by Cloudflare. For selected read-only lookup tools (find_shop, find_product, find_offers, get_shop, get_trust, get_shipping_policy, get_shop_policies, list_coupons) we additionally store the search term, the number of hits, the access route (REST or MCP) and, if sent, the name the calling program gave itself (x-osg-caller), in order to detect missing shops; these entries are deleted after 90 days. For the free-text searches (find_shop, find_product, find_offers) the search term is stored only if the search had no hit; for the others the shop domain takes its place. For each of these entries we also store the country derived from the IP address and the request identifier assigned by us per request; through it the entry can be linked to the log line of the same request, including the hash value of the IP address. The hash value of the IP address is formed with a fixed value that appears in the source code; it is pseudonymisation, not anonymisation, and remains personal data. If you report a coupon code or a shop or fact entry as incorrect via the interface (report-code, report-issue, MCP tools report_code and report_issue), we store the shop domain, the code (code reports only), the reason from a fixed list, the access route (human or program), the time and a hash value formed in the same way from your IP address or the identifier of your API token, with which we limit repeat reports. These reports accept no free text. For rate limiting, the server remembers the IP address (for IPv6 the /64 network) only in working memory, not in a log. If an error occurs on our interface server, we send an error report for troubleshooting to an error-reporting system that we operate ourselves (GlitchTip on our own server in Germany, reached through a tunnel; no external provider). The report contains only fields from a fixed allow-list: event identifier, time, error type and code location (file, function, line), program, operating-system and host name with versions, name of the tool, call type (MCP and HTTP), status, duration, the derived country, the identifier of the API token, and the session and request identifiers. It does not contain the IP address, addresses (URLs), arguments, search terms or free text. The session and request identifiers link the report to the log line of the same request and thus to the hash value of the IP address. The purpose is troubleshooting (Art. 6(1)(f) GDPR); error reports are deleted automatically after 90 days. The purposes of the remaining processing are operation, abuse defence and usage statistics (Art. 6(1)(f) GDPR).

7. Contact by e-mail

The website has no forms that send data to us. The only exception is the search: its search term is transmitted as part of the requested address (section 2). If you write to us by e-mail (info@openshopgraph.com), we process your e-mail address and the content of the message in order to answer it (Art. 6(1)(b) or (f) GDPR). Cloudflare forwards the address (Cloudflare Email Routing, Cloudflare as processor, transfer to the USA as in section 2) to a mailbox at Google (Gmail; recipient Google Ireland Limited or Google LLC, USA, under the EU-US Data Privacy Framework). The listing form (/eintragen or /partner) is not open yet and transmits no data. There is no newsletter.

8. Content of the directory

The information on shops comes from publicly accessible sources, mainly the shops' own websites, and names its source. Descriptive texts are partly produced automatically; no data of the visitors of this website flows into them. If you would like an entry corrected or removed, you can reach us at the e-mail address given above.

9. Retention

Copy and expiry reports (section 5) and the demand log (section 6) are deleted after 90 days. The light/dark setting stays in your browser until you delete it there. Rate limiting keeps addresses in working memory only. Error reports (section 6) are deleted automatically after 90 days. Access data at Cloudflare is deleted by Cloudflare under its own periods. The operating log of the interface is rotated by size, not by time (three files of at most 50 MB each, after which the oldest is overwritten); how long an entry stays in it depends on traffic, and we promise no fixed period for it. No fixed period applies to reports made via the interface; they are kept until the purpose no longer justifies it, and on request we delete them earlier. As of this policy, no reports via the interface exist yet.

10. Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent given at any time with effect for the future. Requests to: info@openshopgraph.com.

11. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

As of: 21 October 2026