Controller
Marko Plahuta, Virostatik s.p., Poljanski nasip 32, 1000 Ljubljana, Slovenia — X: @Virostatiq.
The bloki.si website
The site sets no cookies, has no analytics and loads no third-party content. The website’s server keeps no visitor log. See also cookies.
Your account (auth.bloki.si)
You need an account to use the MCP server. We run the sign-in server ourselves (Logto software) on a server in Germany.
- Username and password: we store the username and a hash of the password (we never know the password).
- Sign in with Google: Google passes us your email address, name and profile picture; we store them with your Google account’s identifier. Google’s processing is governed by Google’s privacy policy.
- The time the account was created and last signed in are recorded.
Purpose and basis: providing the service you asked for (Art. 6(1)(b) GDPR).
Using the MCP server (mcp.bloki.si)
For each tool call we record: your account identifier, the time, the tool’s name, the credits spent, the duration, the number of rows returned, the outcome (success, error, refusal) and a request identifier. We do not store the content of your questions or the tools’ arguments (such as the addresses or advert texts you send) in the usage record.
The web server in front of the MCP server keeps an access log with the IP address, time, path and client; it is used for operation and security.
Purpose and basis: providing the service and accounting for credits (Art. 6(1)(b)); security and abuse prevention (legitimate interest, Art. 6(1)(f)).
Service updates
If your account has an email address, we may send you news and changes about Bloki.si. Every message carries an unsubscribe link, and you can also unsubscribe by writing to the address above.
Processors and transfers
- Hetzner Online GmbH, Germany — server hosting. The data stays in the EU.
- Google — only if you sign in with Google; Google is an independent controller for its part.
We do not sell data and do not share it for advertising.
Retention
Account data is kept while the account exists. The usage record is kept while the account exists and deleted with it. Access logs are kept for 3 days.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection. Send requests as a direct message on X: @Virostatiq. You can lodge a complaint with the Information Commissioner.
Data in the server’s answers
The server answers from public registers. Private owners carry no identifier in them and the server does not reveal them; sole traders are never returned by name or registration number. More in data and limits.