Privacy policy

Last updated: 9 October 2026 · Controller: Brightstep Tech Inc., Resi-Huber-Platz 1, 81371 München, Germany · Contact: [email protected]

Summary: we do not store the URLs you check or the results. They are used once to run the check and are then discarded. We keep only an anonymous usage count for 90 days.

What we process

• URLs and redirect maps: the URLs ChatGPT sends (or the CSV file you attach) are used in the server's memory to request those URLs and build the report. They are not written to disk, not logged and not kept after the response.
• Requests to the sites you check: to follow the redirects, our server sends ordinary HTTP GET requests to the URLs, identified by the user agent Mozilla/5.0 (compatible; RedirectChecker/0.1; +https://redirects.eralpbayraktar.com/support). Those sites see our server's IP address, not yours. Cookies that a site sets during a redirect are kept only for that one chain and then discarded.
• Usage statistics: for each tool call we record the hour, the tool name, whether it worked, which assistant made the call (Claude, ChatGPT or other, from the request's technical headers, plus the app name it declares), the country and language reported by ChatGPT, and a one-way hash of the anonymous user identifier from OpenAI. This is used only to count usage and fix errors, and is deleted after 90 days. It contains no URLs or results.
• Rate limits: to prevent abuse, the number of requests per hashed user identifier and per connecting IP address (the address that reaches our server, normally OpenAI's) is counted in memory for up to 24 hours. These counters are never written to disk or logged.

Legal bases

• Checking the URLs you ask for: Art. 6(1)(b) GDPR (providing the service you request).
• Anonymous usage statistics: Art. 6(1)(f) GDPR; our legitimate interest is to run the service, count usage and fix errors.
• Rate limits, security and delivery through Cloudflare: Art. 6(1)(f) GDPR; our legitimate interest is to keep the service secure and available.

What we do not collect

We do not collect names, email addresses, accounts, chat history, cookies or advertising identifiers, and we do not log or store IP addresses beyond the in-memory rate-limit counters above. We do not sell or share data, and we do not use it to train models.

Processors and location

The server runs on Amazon Web Services (Frankfurt, EU) (privacy notice). Requests to this service pass through Cloudflare, Inc. (content delivery network and TLS proxy), which processes the connecting IP address and the request data in transit to deliver them to our server; The server is in the EU (AWS, Frankfurt). Cloudflare operates a global network, so request data in transit may be processed outside the EU/EEA, including in the USA; such transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or on the EU Standard Contractual Clauses (Cloudflare privacy policy). Apart from these processors and the sites you ask us to check, no third party receives your data. What you share with ChatGPT itself is covered by OpenAI's privacy policy.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection (to processing based on legitimate interests) and data portability. Because we keep no URLs or results, there is nothing to access or delete beyond the anonymous usage count. Write to [email protected]. You can also complain to a supervisory authority, in particular in your country of residence; our lead authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany (lda.bayern.de). In the UK you can complain to the Information Commissioner's Office.