Effective date2026-01-01
This document explains how TANOS.online processes personal data and user-generated content when you use the service.
TANOS.online is a private, non-commercial project provided free of charge to a limited group of invited users and is intended only for persons aged 16 or over; by activating an account and accepting the Terms, the user expressly confirms their age.
We process email and one-time login-code verification data, language, settings, age and Terms confirmations, user content and attachments, projects, tasks, notes, comments, sharing, blocks and reports, session and device identifiers, data needed for optional notifications, security and login events including IP address and user agent, and aggregated visit data.
We use data to activate, authenticate and operate accounts, store and share content, synchronise, secure the service, prevent abuse, handle reports, provide support and meet legal duties. The bases are performance of the service contract, legitimate interests in secure and functional operation, legal obligations, and voluntary consent for optional notifications, which can be withdrawn by disabling them.
The service, database and transactional email run on a VPS at ZonerCloud. We disclose data to other recipients only where necessary to provide the service, required by law, or when a user shares content.
Notifications are disabled by default; data needed to deliver them is stored only after voluntary activation and is disabled or removed when notifications are turned off. Content is available only to selected sharing recipients according to their role. Blocking, reporting and moderation use the necessary identifiers, reason, message, status, administrator note and resolution time to protect users and the service. An exception is necessary access by authorised reviewers and OpenAI as processor for the shared-content checks described below.
Essential secure cookies maintain the session and optional remember-me login. Local browser storage keeps language, theme, interface settings and some temporary data needed for the service to function. Temporary cache may contain static service files, never the secret deletion confirmation token. When an account is deleted, account-related local data is removed where the service can remove it; unrelated device preferences remain.
We keep an active account and content while used; recycle-bin and deleted content for 30 days; deletion requests until expiry, usually 1 hour; login codes are valid for 10 minutes and the verified state awaiting Terms acceptance for at most another 10 minutes; login-challenge and rate-limit records are removed 1 day after expiry; persistent login renews with activity and expires after 30 days of inactivity; temporary login has a fixed 12-hour limit, and session records are removed 30 days after expiry or revocation; processed notification queues for 7 days; notification history and security login events for 90 days; delivered operational events for 1 day; completed-deletion audit without email, IP or user agent for 90 days; resolved or dismissed reports for 365 days; aggregate visits for 12 months; removed-attachment previews and orphan cache for the configured TTL. Raw server logs and technical VPS backups rotate within 30 days. An account with no login or confirmed in-app activity for 12 consecutive months may be deleted automatically.
Deletion can be started in signed-in settings or publicly at https://app.tanos.online/?delete-account=1. After one-time email confirmation we remove the account, login verification data, sessions, device data and notification data, owned content, sharing and content authored in other users’ objects from active systems. Derived previews are deleted only after the database transaction commits. Technical backups are overwritten within 30 days and a deleted account is not normally restored.
You may request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier processing. Contact info@tanos.online; we may reasonably verify identity. You may complain to the Czech Office for Personal Data Protection (uoou.gov.cz).
We use HTTPS, restricted access, HMAC-protected login codes, hashed session tokens and an encrypted login-email queue, CSRF protection, rate limiting and database transactions. No measure provides absolute security. We may update this policy as the service or law changes and will always publish a new effective date.
The controller of personal data processed in connection with the TANOS.online project is Jiří Kobliha. For privacy matters, the controller can be contacted at info@tanos.online.
When content is first shared, added, changed, restored or moved into a shared space, we check project, task, notebook, note and comment text and supported text and image attachments using the OpenAI Moderation API. Unshared content is not sent. This integration does not analyse audio, video, PDFs, office documents, archives, animations or content exceeding technical limits, and does not label them safe. We send the content needed for the check without adding the account email, IP address or internal identifiers; these may nevertheless appear in the content itself. Images are re-encoded to remove metadata.
OpenAI is an additional processor for this check; under its data processing addendum, OpenAI Ireland Ltd. is the contracting entity for customers in the EEA. Processing may also occur outside the EEA under applicable transfer safeguards. We do not enable voluntary sharing of API data for model training. OpenAI documents /v1/moderations as not using data for training and having no stored application state or abuse-monitoring retention; this is not a promise of zero retention of all operational or legally required data. Provider terms: https://openai.com/policies/data-processing-addendum/ and https://developers.openai.com/api/docs/guides/your-data .
The purpose is user protection and prevention of serious misuse, based on legitimate interests under Article 6(1)(f) GDPR. An AI result is a signal for human review, not proof of illegality or an automated account decision. Checks can be wrong and do not detect all nudity, crime, hacking or malware. Explicitly authorised reviewers may access necessary content; accesses and decisions are audited. TANOS retains check identifiers, keyed version fingerprints, categories, scores, status and review notes for at most 90 days, without keeping additional text or attachment copies for moderation. Send objections or requests for human review to info@tanos.online. Acceptance of the Terms does not replace consent where consent is required.
The queue holds only content references and operational metadata until processing or withdrawal of sharing. The 90-day period for results and audit starts when a check is created, including unresolved findings.
