Trust & privacy
Who touches data, where, and the rules we keep. Written to be checked.
Every service that touches data
Taken from each provider's own documentation or our account settings on 1 October 2026.
| Service | What it does for us | Where it processes data |
|---|---|---|
| Hetzner | Servers for the club apps we host. | No club app runs on our servers yet. We tell you in writing which location your club's app uses before it goes live. Our other servers at Hetzner are in Germany and Finland. Source |
| Cloudflare | Runs and protects this website. | Its global network. Cloudflare says it stores data mainly in the United States and the European Economic Area. Source |
| Resend | Sends the emails from this website's form. | Sends from Ireland. Stores the messages and delivery logs in the United States, for 30 days. Source |
| Purelymail | Our mailbox (hello@ and dmitri@ownclub.eu). | United States (Amazon Web Services, northern Virginia). Source |
| Telegram | Only if your club uses the Telegram helper (coming). | Netherlands, for accounts registered in the UK or the EEA. Source |
| Calendar, when you book a call on meetdima.org. | Google's servers around the world. Source | |
| OpenAI | The AI model behind the assistant that helps us with sales and support. It can read emails sent to us. | OpenAI is a US company. See its privacy policy. Source |
| Anthropic | Only if your club switches on the club assistant in Telegram (coming). | Anthropic is a US company. See its privacy policy. Source |
Members decide what others see
It's a rule we keep when we deliver: no club goes live until every member's details are hidden until that member chooses to show them.
Your rights
You can ask what we hold about you, have it corrected or deleted, get a copy, or object to how we use it. Email dmitri@ownclub.eu; we answer within a month.
You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). The full details are in our privacy notice.
How we use AI
When an AI assistant helps us with sales and support:
- Every sales email is approved by Dmitri before it is sent.
- Answers the assistant writes on its own to simple support questions are signed "Dima's AI assistant".
Security, as it stands today
- The app has no passwords, so there are none to leak. Sign-in links work once and expire after 30 minutes.
- In the app's server set-up, the database accepts connections only from the server itself, not from the internet.
- This website sets no cookies, loads nothing from other websites and runs no analytics.