Privacy & Cookies
Effective date: 11 November 2026
Operator and contact
- Legal name
- seventh-day labs LLC
- Address
- 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA
- Legal form
- Limited liability company (Wyoming, USA)
- Contact email
- privacy@ipnorlog.com
Data we process and why
The operator identified above is the controller of your personal data. We process your email address, account and workspace details to provide access to IPnorLog. We process usage and payment records without prompt content to measure usage, manage credits and administer payments. This processing is necessary to perform our contract with you.
We process IP addresses and technical logs for security and abuse prevention, based on our legitimate interest in protecting the service and its users.
In Standard mode, conversation content is stored encrypted to provide your conversation history. Content needed to generate a response is sent to the model provider used by your selected route.
Who receives data
OpenAI or Anthropic processes model requests according to the selected route. DigitalOcean provides hosting in the EU (Frankfurt). Our email delivery provider processes your email address and sign-in messages. Model providers process data under their own applicable terms; EU hosting does not mean that all model processing takes place in the EU.
The operator is established in the United States and model providers may process data outside the EU and EEA. Where personal data is transferred to such countries, we rely on the safeguards required by the GDPR, such as the EU Commission's standard contractual clauses or the EU-US Data Privacy Framework where the recipient is certified.
How long we keep data
Standard conversation history is kept until you delete it or its selected retention period expires. Automatic deletion is off by default. For each conversation, you can choose 30, 90 or 365 days from its last activity. Further activity resets that period. Expired conversations are removed by a periodic cleanup, so deletion may not happen at the exact expiry time.
We keep account and workspace data for as long as needed to provide the service. Technical logs, usage and payment records are kept for as long as needed for security, billing, legal obligations and resolving disputes. Contact us for details about the retention applicable to your records.
Your rights
You may request access to, correction or erasure of your personal data, restriction of processing and data portability, where applicable. You may object to processing based on legitimate interests. To exercise your rights, contact the operator at the contact email above.
You may lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA member state of your habitual residence, place of work or place of the alleged infringement. You can also contact us first at the contact email above.
Cookies
IPnorLog uses only strictly necessary cookies for sign-in and security. We do not use analytics or advertising cookies. These necessary cookies do not require consent, so there is no cookie banner.
The secure configuration uses the __Host- names and the Secure flag. Local HTTP development uses the names without that prefix. All cookies are host-only and use the path /.
| Name (secure / local) | Purpose | Lifetime | HttpOnly | SameSite |
|---|---|---|---|---|
__Host-introuter_sessionintrouter_session | Maintains your signed-in session. | Browser session | Yes | Lax |
__Host-introuter_csrfintrouter_csrf | Protects requests against cross-site request forgery (CSRF). | Browser session | No | Strict |
__Host-introuter_oauthintrouter_oauth | Binds the Google sign-in flow to your browser. | 10 minutes (600 seconds) | Yes | Lax |
Session cookies have no fixed browser expiry; browser session restore may preserve them after a restart. Server-side session expiry or revocation can end access earlier. The OAuth cookie is cleared when the sign-in callback is handled.