Privacy policy

Last updated: 24 October 2026. Reading time: half a beer.

t-server (tserver.fi) is a personal, non-commercial site run by Tobias Asplund in Finland. That makes him the data controller, a title he has added to his LinkedIn in his head only. This page explains what is stored about you and why. Nobody reads these, so congratulations on being the exception.

What is stored

• From your Google account, when you sign in: your name, email address, profile picture link and Google account ID. Nothing else is requested from Google. Your search history might be available everywhere else, but not here.
• Sign-in log: time, IP address and browser of each sign-in. It exists so that a sign-in that wasn't you gets noticed before it gets interesting.
• Access: which apps on t-server you can use. A short list, possibly very short.
• What you add in apps, for example training data or files you upload. Some apps may allow for adding more sensitive information, such as physical suffering in a training app. They will ask for your explicit consent first, and you can remove it and the data at any time. Your lower back's suffering stays opt-in.
• Technical logs: the server keeps short logs of requests (pages, errors) to keep things running. They rotate away on their own and are read only when something is on fire.

Why, and on what legal basis

• To let you sign in and use the apps you have access to. Legal basis: providing the service you signed up for (GDPR Art. 6(1)(b)). There is no business model, so you can't be the product.
• The sign-in log is kept to protect accounts and spot misuse. Legal basis: legitimate interest in keeping the place secure (Art. 6(1)(f)).
• Sensitive information in apps is stored only with your explicit consent (Art. 9(2)(a)), which you can withdraw at any time.

No advertising, no tracking or analytics cookies, and your data is never sold or shared for marketing. The only cookies are the ones needed to keep you signed in and to protect forms.

Where it is stored and who processes it

• Data is stored on a server in Finland (Hetzner, Helsinki), with encrypted backups within the EU. It's cold there, which the server appreciates more than anyone else does.
• Google handles the sign-in itself. We just get the result: you, as described above.
• If an app uses AI features, the data needed for that feature is sent to the AI provider (Anthropic) only to produce the result. It is not used to train AI models. The app tells you when this happens, so the only robots that know everything about you are the ones in your phone, laptop, car, toothbrush, fridge...
• Google and Anthropic are US companies, so using them means some data leaves the EU. That happens under the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the EU's standard contractual clauses.

How long

• Account data and app data: until you delete your account. Deletion takes effect 3 days after you request it, so you can change your mind by signing in again before then. After that there is no data, only regret.
• Sign-in log: 12 months, which is longer than most gym memberships get used.
• Backups: deleted data disappears from backups within 14 days. Then it's gone for good, which is more closure than most of us ever get.

Your rights

You can see your data and request deletion of your account at any time on your account page. You also have the right to request a copy of your data, have it corrected, restrict or object to its processing, and withdraw consent. A real human answers within a month, which is the legal deadline and also roughly his attention span.

If you think something is wrong, you can file a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi). We'd prefer you tell us first. The Ombudsman has real problems to deal with.