Privacy Policy

TokenBank offers a public API, an MCP server (mcp.tokenbank.world) and an agent endpoint. They need no account and no key. AI assistants such as ChatGPT or Claude can call them on behalf of their users.

What we receive. The request itself — the name of the tool and its parameters, for example a ticker or a few search words — which we need to compute the answer, plus the server log data described above. We do not receive the conversation you have with the assistant, and we never ask for names, e-mail addresses, wallet addresses or payment data.

What we store. For calls to the MCP server we keep a usage record with the tool name, the time, the number of results and the names of the parameters used — not their values. For searches through the API and the agent endpoint we additionally keep the search terms or request text (at most 400 characters). These records contain no IP address, no browser or client identifier and no account or conversation ID.

Why. To operate and secure the service, to count how the tools are used, and to find products people look for that we do not list yet. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.

Recipients. We do not sell or share this data. It is processed on our behalf only by our hosting provider (UpCloud, servers in Frankfurt, Germany) and by Cloudflare, which delivers the site.

Retention. Server log data is deleted after 14 days; usage records after 12 months at the latest.

Your control. The usage records cannot be linked to a person. You can use the same data on this website without any assistant. For questions or deletion requests, write to [email protected].

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We use it to understand which pages and comparisons visitors find useful, so that we can improve them.

Consent is required and it is opt-in. Google Analytics is not loaded at all until you actively accept cookies in our cookie banner. If you decline, or simply ignore the banner, no Google script is requested and no analytics cookies are set. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG.

Measurement ID: G-NTJ8NZ93Z8

What it stores. After consent, Google Analytics sets cookies (typically _ga and _ga_*) containing a randomly generated identifier, and records information such as the pages you view, the time of your visit, approximate location derived from your IP address, referrer, device and browser. We have enabled IP anonymisation, and we have disabled advertising features: ad storage, ad user data and ad personalisation are all set to “denied”. We do not use Google Analytics data for advertising or remarketing, and we do not combine it with other data sources.

Transfer to the United States. Google may process this data on servers in the United States. Google LLC is certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (adequacy decision of 10 July 2023). In addition, transfers are covered by the EU Standard Contractual Clauses within Google’s data processing terms, which we have accepted as part of using the service.

Retention. Analytics data associated with cookies and identifiers is retained for 14 months and then deleted automatically.

How to withdraw. You can withdraw your consent at any time, with effect for the future, using the button below. Withdrawal is as simple as giving consent. You can also install Google’s browser opt-out add-on, or read Google’s own privacy policy.