This privacy statement provides information about the processing and the protection of your personal data.
OVERBRING S.M.P.C. (hereafter “we”) is committed to protect your personal data and to respect your privacy according to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (also known as the GDPR, i.e. the General Data Protection Regulation).
This privacy policy explains the reason for the processing of your personal data, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible Data Controller with whom you may exercise your rights, the Data Protection Officer.
This policy applies to our main website at overbring.com (including www.overbring.com), the subdomain seismo.overbring.com, where we may use Google Ads for monetization purposes, and the API gateway at si.overbring.com. For areas of the site without ads (such as the main overbring.com pages), our data practices remain minimal as described. Where Google Ads are present, additional data processing occurs as outlined below in paragraph 2.2 to enable ad delivery and measurement. We and Google act as independent data controllers for personal data processed in connection with Google Ads.
Last updated: October 25th, 2026.
overbring.com (and www.overbring.com)The only personal data collected / processed when browsing overbring.com / www.overbring.com is what your browser sends to this web server when requesting content, such as your IP address, the user-agent string, browser type, operating system, referral URLs, device information (e.g., device IDs), device settings, pages visited, links clicked, the requested URL, and search terms and any query parameters appended to the URL you are visiting.
In other words, there is nothing installed on this website that might track you across websites of this or other companies. We do not use a website visitor tracker, a click tracker, a tag manager, or any other such tool that would collect your private data. Even the fonts are loaded not from Google Fonts’ Content Distribution Network, but from the very same web server you are now reading this page on.
The only processing that takes place beyond the storage of web server access logs is their visualization using the GoAccess open-source software.
For the main site (excluding ad-enabled subdomains), this site neither sets nor reads any cookies. You can verify this by using your web browser’s “Inspect” functionality or by checking out the site’s Cookieserve.com results.
The collection of the above information by the web server is automatic and exclusively used by the owner of OVERBRING S.M.P.C.:
This processing satisfies legitimate interest (which is not overridden by your data protection interests), such as preventing fraud, ensuring network and information security, and protecting our legal rights and interests in serving you a website that works well (GDPR Article 6(1)(f)).
seismo.overbring.comOn seismo.overbring.com we use Google Ads (provided by Google LLC) to display advertisements. This involves additional data processing, including the use of cookies and similar tracking technologies to serve relevant ads, measure ad performance, and prevent fraud. Google Ads may collect and process data such as your browsing behavior, approximate location (derived from IP address), device identifiers, and interactions with ads.
We do not process this data; Google LLC does, in order to:
For ad-related data, Google, as an independent controller, processes this data:
The legal basis for Google’s processing is your consent (GDPR Article 6(1)(a)), which you provide via our cookie consent banner before any non-essential cookies are set or ads are loaded. You can withdraw consent at any time through the banner, browser settings, or by contacting us, though this may limit personalized ads (non-personalized ads may still appear). Without consent, ad-related tracking does not occur.
We implement Google Consent Mode to respect your choices and signal consent status to Google, ensuring data processing aligns with GDPR. Server logs (as in 2.1) still apply for core site functions.
si.overbring.comsi.overbring.com is Inferyes, our inference gateway. It is not a public service: access is by invitation, accounts are created by us, there is no sign-up page, and we send no email. Two kinds of people meet here: the operator (us), and the people we build with, whose applications call the API with a token.
When a partner’s application makes a request, four kinds of data are involved:
API tokens are stored only as SHA-256 hashes; a token’s plaintext is shown once, when it is minted. A token belongs to a workspace, so usage is attributed to the workspace rather than to a person.
There is no advertising, no profiling and no tracking on the gateway. Its figures are aggregate counts across the workspaces it serves, never a record of a visitor’s path.
On the main overbring.com site, no cookies are used.
On si.overbring.com, no advertising or analytics cookies are set. The operator UI sets a session cookie when we log in, and the cookie notice stores one technical cookie recording that it has been dismissed. Applications authenticate with a bearer token, not a cookie.
On seismo.overbring.com, we use cookies and similar technologies (e.g., pixels, local storage) for Google Ads. These include:
Google uses this data to infer interests and demographics for ad targeting. For more details, see Google’s Privacy Policy.
You can manage cookies via your browser settings or opt out of personalized ads through Google’s Ads Settings. seismo.overbring.com requires explicit opt-in consent before setting advertising cookies.
For the main site, please refer to the section 2.1 above.
For si.overbring.com, the personal data are the account’s email address, the usage metadata described in 2.3, and the content a partner’s application sends, which we process on the partner’s behalf.
For seismo.overbring.com with Google Ads, in addition to server logs, Google may collect:
We do not collect sensitive personal data (e.g., health, political opinions) unless inadvertently through ad interactions, in which case it is not used for targeting. For more details, see Google’s Privacy Policy.
The personal data described in section 2.1 (i.e., the web server’s access logs to pages served to users’ web browsers) are deleted automatically at the end of every calendar year.
On si.overbring.com, content is not retained. It is held while a run needs it and cleared once the result has been delivered — in the response to a synchronous call, or when it is collected through the API. An output nobody collects is cleared an hour after the run ends, and the input is cleared when the run reaches a final state. A worker deletes its copy of a document as soon as the text is back at the gateway. The usage metadata is kept as the accounting record for as long as the workspace exists, and is deleted with it. Account email addresses are kept until the account is closed. Server logs are held in the host’s journal, rotated at the system’s size limit, and used for nothing but operating and securing the service.
For Google Ads data, retention follows Google’s policies: typically up to 18 months for personalization, but anonymized aggregates may be kept longer. See Google’s retention details.
The web server logs are stored securely on the web serving host itself, which is part of our hybrid cloud infrastructure, and is running a stable and reliable web server software installed on a stable and reliable Operating System, and both software pieces are updated regularly to their latest stable versions, with the latest security patches applied.
The gateway runs on our own servers. Traffic is encrypted in transit, terminated at the reverse proxy. API tokens are stored only as hashes, passwords with Argon2, and access to the server and the database is limited to the owner.
One limit we state rather than imply: the database is not encrypted at rest. A copy of the database file, or of a nightly backup, would expose whatever a run was holding at that moment. The credentials we store for the model servers are encrypted inside the application. The gateway’s own pages say the same thing, in more detail, at si.overbring.com/zero-data-retention.
For Google Ads, data is protected per Google’s security measures, including encryption and access controls. We ensure compliance through our agreements with Google.
For the main site, only the owner of OVERBRING S.M.P.C. has access to the personal data collected, and this data is not disclosed to anyone else, except to the extent and for the purpose we may be required to do so by law (e.g., in cases of DDoS attacks or hacking attempts).
On si.overbring.com, only the owner has access to the accounts, the database and the logs. We do not send content to third parties: the models and the workers that run a request are on our own machines. A partner’s content is processed by us on their instructions, and by no one else.
For Google Ads on seismo.overbring.com, data is shared with Google LLC and its affiliates for ad serving and measurement. Google may share with its partners (e.g., advertisers) in aggregated, non-identifiable forms. We do not sell your data. Data may be transferred outside the EU (e.g., to the US) under safeguards like the EU-US Data Privacy Framework or Standard Contractual Clauses.
You have the right to request your personal data and to rectify them in case your personal data are inaccurate or incomplete. Where applicable, you have the right to request the deletion of your personal data, to restrict the processing of your personal data, to object to the processing (including profiling for ads), and the right to data portability.
You have the right to object to the processing of your personal data, which is lawfully carried out pursuant to GDPR Article 5(1)(a) on grounds relating to your particular situation, or GDPR Article 6(1)(a) for consent-based processing. You can withdraw consent for ads at any time through the Google Ads settings.
You can exercise your rights by contacting the Data Controller, or in case of conflict the Data Protection Officer. If necessary, you can also address the Hellenic Data Protection Authority or the European Data Protection Supervisor.
Where you wish to exercise your rights in the context of one or several specific processing operations, please send us an email so that we can delete the records of your IP address accessing this website from the web server logs, or assist with ad-related requests (e.g., via Google’s tools).
Our services are not directed to children under 16 (the age of digital consent in Greece under GDPR). We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete it.
We may update this policy to reflect changes, such as new features. Updates will be posted here with the date. For significant changes, we may notify via the site with a pop-up.
These websites do not collect or process any of your personal data beyond what the web server software anyway logs when you access them — with two exceptions. On seismo.overbring.com, Google Ads are used with your consent to show relevant ads and measure performance. On si.overbring.com, the inference gateway processes what a partner’s application sends in order to answer it, and does not keep it: the content is cleared when the result is collected, or an hour after the run ends, and what remains is the accounting metadata — which operation, which model, how many tokens, how long, when, and for which workspace. We share ad-related data only with Google under GDPR safeguards. We do not give other data out to anyone, except if, for example, there is an attempt to hack the web server, and we are requested to provide the access logs to any cyber-crime authority.
We do not track you, your clicks, your demographic data, etc., without consent. In fact, we object to the rampant violation of Internet user privacy that regularly takes place on most websites under the guise of “digital marketing”, just because you, the user, is requested to click on some button that says “accept all cookies” or “accept necessary cookies only”. For ads, we require explicit opt-in. The gateway has no analytics and no ad network: its figures are aggregate counts, and it does not keep the content it is handed. For the gateway we also say what we do not have: the database is not encrypted at rest, and we would rather write that here than let you assume otherwise.
A paragraph about what you are working on is enough to start.