Privacy policy

Last updated: 2026-10-10

1. Who we are

AI Rate Card (https://airatecard.com) is run by the operator of AI Rate Card ("we"). Contact for any privacy question or request: hello@airatecard.com.

2. The short version

An account is optional. It needs a login name and a password, never an email address, and no IP address is ever stored - not for an account, not for anyone.
We set no cookies and use no third-party trackers, advertising networks or social media plugins.
We count how the catalog is used only in aggregate, without any identifier of you.
We never sell data.

3. What we process and why

Data	When	Why	Legal basis (GDPR)	How long
Server logs: time, page, browser - never an IP address	every visit	security, fighting abuse, fixing errors	legitimate interest (Art. 6(1)(f))	14 days
Usage counts: which pages, models and offers are viewed, searched and followed	every visit	to see which parts of the catalog are useful	legitimate interest	counts only; no identifier is stored
A one-day visitor hash (from the browser only, with a random key that changes every day and is never stored)	every visit	to count distinct visitors per day	legitimate interest	that day only; it cannot be linked to another day or back to you
Emails you send us (for example, a provider request)	if you write to us	to answer you and to process the request	legitimate interest	as long as needed, at most 2 years
An account: a login name, a password (kept by our sign-in service as a one-way hash we cannot read), your chosen language and currency, saved views, price alerts, and the dates (never the codes) of the recovery codes you made	if you sign up	to let you keep settings and saved items between visits, and to let you back into the account if you forget the password	performance of the contract you asked for by signing up (Art. 6(1)(b))	until you delete the account
Usage counters of the data: per account and day, how many requests and rows it took through downloads, the API, the MCP server and price history - never an IP address	when you download a table or call the API or MCP with your key	to apply the limits of your access level (Free, Pro) and to stop abuse	performance of the contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f))	90 days

We do not use any data for automated decisions about you, and we do not collect special categories of data.

4. Cookies and local storage

We set no cookies other than the one that keeps you signed in, if you have an account. If you pin cards to the home page, the list is kept in your browser's local storage (arc.pins) and is never sent to us; you can clear it at any time.

5. Your account

Signing up needs only a login name and a password; there is nowhere to put an email address, and your IP address is never recorded, signed in or not. If you forget the password, you reset it with one of the ten one-time recovery codes the account page lets you make - we keep only their dates, never the codes themselves, so keep your own copy safe. At https://airatecard.com/account you can at any time download everything the site keeps about your account as a file, or delete the account outright (typing the login name again to confirm); deleting removes the login name and password from our sign-in service and every row we hold about the account.

6. Who processes data for us

hosting of the servers — a hosting provider in Germany (EU);
content delivery and protection against attacks — Cloudflare, Inc. (sees your IP address when it delivers the pages);
email — an email provider in the EU, only for messages you send us.

Where a provider processes data outside the European Economic Area, the transfer is protected by an adequacy decision or the European Commission's standard contractual clauses.

7. Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to data portability. For an account, you can already download or delete everything yourself at https://airatecard.com/account (above); anything else, including emails you sent us, write to hello@airatecard.com and we answer within one month. You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work.

8. Security

Connections to the site are encrypted (HTTPS). Logs contain no passwords, tokens or message contents, and access to the servers is limited to what is needed to run the service.

9. Changes

If we add payments or anything else that processes more data, we will update this policy before it starts. The date at the top shows the latest version.