HarmonyFlow

Privacy policy.

Last updated: August 12, 2026

Controller

The controller responsible for this website is Alexander Winter. You can contact me at alexander-winter@tutamail.com. Further contact details are available in the Legal notice.

Hosting and technical data

This website is hosted and delivered using Cloudflare Pages, a service provided by Cloudflare, Inc. When you visit the website, technical connection data such as your IP address, browser information, the requested URL and the time of access may be processed by Cloudflare's global network. This processing is technically necessary to deliver the website and to help protect its security and reliability.

The legal basis for this processing is our legitimate interest in providing a secure and reliable website (Article 6(1)(f) GDPR). Cloudflare may process data internationally. For more information, please see Cloudflare's Privacy Policy and Cloudflare's GDPR information.

AI Chat

The AI Chat feature (ai-chat.html) lets you send messages to the website's Cloudflare Worker. Cloudflare transiently handles API-backed requests as the hosting and proxy provider. When an API-backed model is selected, the Worker forwards the messages you enter and the active conversation history to the selected upstream provider for the purpose of generating a response. This history can include earlier turns that were generated while a different model or upstream provider was selected. The chat currently offers:

The API credentials for the upstreams are stored server-side in the Worker and are not included in the website or sent to your browser. The Worker adds the website's system instruction, removes client-supplied system messages, validates the conversation size, restricts the request to a model allow-list and forwards the request using the server-side connection for the selected model.

No chat messages are stored on this website, and no user accounts or profiles are created by this website. The current conversation history is kept in your browser memory only while the page is open. When you switch models, the selected model receives the active conversation history, including previous user messages and assistant responses from other models. This can cause earlier conversation content to be sent to a different upstream provider.

For DeepSeek Flash v4 0731, according to AKI.IO's published Data Processing Agreement, content data such as prompts, text entries, documents and generated responses is not logged, stored or evaluated, while limited technical metadata may be processed for API operation and token-based billing. These statements are based on AKI.IO's published documents and may depend on the applicable account, contract and service configuration. AKI.IO states that personal data is processed in data centers within the European Union, mostly in Germany, and not in third countries within the meaning of the GDPR. Please consult the current AKI.IO Data Processing Agreement and AKI.IO Privacy Policy for the provider's current terms and details.

For Leanstral 1.5, Requesty.ai states that it does not train machine learning models on user data and supports a Zero Data Retention mode. The Worker calls Requesty.ai through its dedicated EU AI Gateway (router.eu.requesty.ai), which is hosted exclusively in Frankfurt, Germany (AWS eu-central-1). Requests and responses are forwarded in real time, remain within the European Union and are not stored by this website. Limited technical metadata such as timestamps, model used, token counts, latency and cost may be processed by Requesty.ai for API operation and token-based billing. These statements are based on Requesty.ai's published documents and may depend on the applicable account, contract and service configuration. Please consult the current Requesty.ai Privacy Policy, Requesty.ai Security overview, Requesty.ai EU AI Gateway and Requesty.ai Data Processing Agreement for the provider's current terms and details.

The legal basis for processing your messages is your consent (Article 6(1)(a) GDPR). By using the AI Chat feature, you consent to the processing described above. Please do not enter personal or sensitive information that you do not want to be processed by an AI model or an external AI service.

Cookies, analytics and tracking

This website does not use its own cookies, analytics services, tracking scripts, contact forms or advertising. No user profiles are created.

External links

This website contains links to external websites. When you follow one of these links, you leave this website and the privacy policy of the respective provider applies.

Your rights

Subject to the applicable legal requirements, you have rights under the GDPR, including the right to request access to, correction or deletion of your personal data, restriction of processing, and to object to processing. You also have the right to lodge a complaint with a data protection supervisory authority.

This privacy policy describes the processing currently associated with this website. Changes may be made if the website or its services change.