Last updated: 5 November 2026. Operator: Łukasz Dulniak, address to be updated, hello@remoteguides.net.
This policy explains what personal data Remote Guides (remoteguides.net) collects, why, who receives it, how long we keep it and what you can do about it. It covers the website and the Remote Guides connector for AI assistants (the ChatGPT plugin, the MCP server and the public REST API). It follows the General Data Protection Regulation (GDPR) and German law.
Who is responsible
The controller is Łukasz Dulniak, a private individual, address to be updated. You can reach the controller at hello@remoteguides.net. There is no data protection officer, because the law does not require one for a project of this size.
Reading the site
You can read every guide without an account and without giving us any data. When your browser requests a page, our hosting provider processes your IP address, the time, the page requested, the browser type and the referring page. This is needed to deliver pages and to block abuse. We do not switch on log storage for the site and do not receive these records ourselves. Our legal basis is our legitimate interest in running a secure site (Art. 6(1)(f) GDPR).
The site and its photographs are hosted by Cloudflare, Inc., USA, which acts as a processor under Art. 28 GDPR. Pages are served from Cloudflare’s global network, usually from a data centre near you, so this data can be processed outside the EU. Transfers to the United States rely on the EU-US Data Privacy Framework according to Cloudflare’s current certification, or otherwise on the European Commission’s standard contractual clauses in Cloudflare’s data processing addendum (Chapter V GDPR).
We use no analytics service, no advertising network, no remote fonts and no embedded players or maps. Apart from our hosting provider, nothing on our pages calls a third-party server from your browser. Site search runs in your browser: what you type is not sent to us.
Cookies and local storage
We set no cookies and store nothing in your browser when you read the site. The public site is a set of static pages with no login and no comments. That is why there is no cookie banner.
Our hosting provider, Cloudflare, can set a strictly necessary security or delivery cookie (their names start with cf or __cf) in some situations, for example if it has to check that a request is not an attack. These cookies do not track you across sites and need no consent under § 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). If we ever add anything that is not strictly necessary, we will update this section and ask for your consent first.
The connector for AI assistants
This section applies once the connector is live; it is not available yet. The Remote Guides connector lets ChatGPT, Claude and other assistants search and read our published guides. It is read-only and needs no account. When an assistant uses it, our server receives only the request the assistant sends (for example the search words “Japan in March” or the name of a guide) and the sending server’s IP address, which is processed as described above. We do not receive your name, your email address, your chat history or your location, and we store nothing about you. Our legal basis is our legitimate interest in providing and protecting the service (Art. 6(1)(f) GDPR).
The company behind the assistant you use (OpenAI, Anthropic or another vendor) is a separate, independent controller for your conversation. What it keeps, and for how long, is governed by its own privacy policy, not by ours.
Photo credits
Most photographs on the site come from Wikimedia Commons under Creative Commons or public domain licences. These licences require us to name the author, so under each photograph we publish the photographer’s name or user name, the licence and a link to the source file. We never publish email addresses, even when they appear in the source data. Our legal basis is our legitimate interest in meeting the licence terms and giving credit (Art. 6(1)(f) GDPR). If you are the photographer and want a credit corrected or an image removed, write to us; see the corrections and takedown route. We reply within three working days.
Contacting us
If you email us, we process your email address, your name if you give it and the content of your message in order to answer you (Art. 6(1)(f) GDPR, or Art. 6(1)(b) where your message concerns a contract). Email to our address is forwarded by Porkbun LLC, USA, to a mailbox at Proton AG, Switzerland. Both act on our instructions as processors under Art. 28 GDPR. Transfers to the United States rely on the European Commission’s standard contractual clauses in Porkbun’s data processing addendum; for Switzerland, the European Commission has adopted an adequacy decision (Chapter V GDPR). We delete the correspondence once your request is dealt with, unless we need it to show that we handled a request you made under this policy.
Backups
We keep copies of the site’s content so that we can restore it after a failure, on the operator’s own computer and in a private repository at GitHub, Inc., USA. They hold no data about readers. Photographers’ names in the image credits are included; GitHub acts as a processor under Art. 28 GDPR. Transfers to the United States rely on the EU-US Data Privacy Framework according to the provider’s current certification, or otherwise on the European Commission’s standard contractual clauses in the provider’s data protection agreement (Chapter V GDPR).
What we do not do
We do not profile you, make automated decisions about you, sell personal data or share it with advertisers or data brokers. The site is not aimed at children, and we do not knowingly collect data from anyone under 16.
Security
The site is served over HTTPS. The public site is static, and the editing system behind it is not reachable from the internet. Only the operator has access to it.
Your rights
Under the GDPR you can ask us at any time to:
- tell you what personal data we hold about you and give you a copy (Art. 15);
- correct data that is wrong (Art. 16);
- delete your data (Art. 17);
- restrict how we use it (Art. 18);
- hand over the data you gave us in a machine-readable format (Art. 20);
- withdraw a consent you gave, with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): where we process your data on the basis of a legitimate interest, you can object for reasons arising from your particular situation. We then stop unless we can show compelling legitimate grounds that override your interests.
Write to hello@remoteguides.net for any of these. We answer within one month.
You can also complain to a data protection supervisory authority (Art. 77 GDPR), in the EU country where you live or work or where the problem happened. The authority responsible for the operator’s seat is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany, datenschutz-berlin.de. Readers in Poland may instead complain to the Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl. You may choose either.
Changes to this policy
We will change this policy when the site changes, for example when we choose a mailing provider or add a service. The date at the top shows the current version. If a change affects data you have already given us, we will tell you by email.
Contact
Questions about this policy: hello@remoteguides.net.