Privacy Policy
Last updated: October 19, 2025
This Privacy Policy explains how ExoQuery, LLC (“ExoQuery,” “we,” “us”) collects, uses, and shares information when you use the ExoQuery Playground (the “Service”).
1) Summary
- We collect minimal operational data to run a safe demo environment.
- Don’t paste secrets or production data.
- The Service is currently provided free of charge, and we do not collect payment-card details for it.
- We don’t sell your personal information.
- EU/UK residents have GDPR rights; California residents have CPRA rights.
2) Information we collect
You provide:
- Code snippets, prompts, or text you submit (avoid personal or sensitive data).
Collected automatically:
- Basic device and usage data (IP address, timestamps, page paths, user-agent), execution metadata (compile/run outcome, resource usage), and error logs.
From third parties (if enabled):
- Analytics events (e.g., page views) from Google Analytics 4.
- Infrastructure logs from AWS.
- CDN access logs and related telemetry from GitHub Pages (to the extent available).
We do not currently collect payment-card or billing information because the Service is provided free of charge. If this changes in the future (for example, if we introduce paid plans), we will update this Policy and describe any additional data collection.
3) How we use information
We use the information we collect to:
- Provide, secure, and improve the Service (e.g., rate-limiting, abuse detection, debugging, usage analytics).
- Analyze how the Service is used in order to develop new features, measure performance, and improve ExoQuery’s products and documentation.
- Create aggregated or de-identified statistics (for example, total number of Playground runs in a given period, common error types, or general usage trends) that we may use internally or in public materials such as blog posts, talks, or marketing pages. These statistics will not identify you personally or disclose your specific code snippets.
- Communicate about updates or incidents.
- Comply with law, enforce Terms, and protect rights, safety, and property.
4) Legal bases for processing (GDPR)
If you are in the EEA/UK, our processing is based on:
- Performance of a contract (to provide the Service you request).
- Legitimate interests (security, abuse prevention, analytics with safeguards).
- Consent (only for non-essential cookies/analytics where required).
5) Cookies & similar technologies
- We use essential cookies for security/session (if accounts exist).
- We use analytics cookies (or similar technologies) to understand how the Service is used and to improve ExoQuery. These are not used for advertising, and you can control or block cookies through your browser or device settings, which may affect some functionality.
- You can manage preferences via our cookie banner (if applicable) or your browser settings.
6) Data retention
- Execution logs & IP addresses: retained for 180 days for security, abuse diagnostics, and analytics, then deleted or aggregated.
- Analytics: retained in aggregated or de-identified form for as long as needed for product improvement and reporting, and otherwise per Google Analytics 4 defaults.
- Support communications: retained as needed to address your request and for legal purposes.
7) Sharing
We share data with:
- Service providers (hosting, logging, analytics, email) under contracts that protect your information.
- Authorities or other parties when required by law or to protect rights and safety.
- Business transfers (e.g., merger or acquisition) with appropriate safeguards.
We may publicly share aggregated or de-identified information about use of the Service (for example, usage statistics or performance benchmarks) in blog posts, talks, case studies, or marketing materials. We do not publicly disclose information that identifies you personally or exposes your specific code without your separate consent.
We do not sell your personal information. We do not share for cross-context behavioral advertising without your consent.
8) Security
We use technical and organizational measures, including sandboxing, network egress restrictions, WAF/rate limits, least-privilege access, encryption in transit, and regular review of logs. No system is perfectly secure.
9) International data transfers
If you access the Service from outside the United States, your information may be processed in the U.S. and other countries. Where required, we use appropriate transfer mechanisms (e.g., Standard Contractual Clauses for EEA/UK).
10) Your rights
EEA/UK: Access, rectification, erasure, restriction, objection, and portability.
California (CPRA): Right to know, delete, correct, and opt-out of sale/share; no discrimination for exercising rights.
To exercise rights, contact us at info@exoquery.com. We may need to verify your identity.
11) Children’s privacy
The Service is not directed to children under 13. Do not submit personal data of children.
12) Data controller & contact
ExoQuery, LLC (data controller)
502 W 7th ST STE 100
Erie, PA 16502 USA
Email: info@exoquery.com
13) Changes to this policy
We may update this Privacy Policy. Material changes will be posted with a new “Last updated” date. Your continued use means you accept the changes.
14) Vendor list
- Hosting: AWS
- CDN: GitHub Pages
- Analytics: Google Analytics 4
- Logging/Monitoring: CloudWatch
/dmca — DMCA Policy & Designated Agent
Last updated: October 19, 2025
We respect the intellectual-property rights of others and expect users to do the same. Under the U.S. Digital Millennium Copyright Act (17 U.S.C. §512), we will respond to properly formatted notices of alleged infringement and may terminate repeat infringers.
1) Designated agent for DMCA notices
ExoQuery, LLC
Attn: DMCA Agent
502 W 7th ST STE 100
Erie, PA 16502 USA
Email: dmca@exoquery.com
2) How to submit a takedown notice
To submit a notice, send a written communication to our designated agent that includes all of the following (see 17 U.S.C. §512(c)(3)):
- A physical or electronic signature of the person authorized to act for the copyright owner.
- Identification of the copyrighted work claimed to have been infringed, or a representative list for multiple works.
- Identification of the material claimed to be infringing (e.g., the specific code snippet or page URL) and information reasonably sufficient to permit us to locate the material.
- Your contact information (name, address, phone, and email).
- A statement that you have a good-faith belief that use of the material is not authorized by the copyright owner, its agent, or the law.
- A statement that the information in the notification is accurate, and under penalty of perjury, that you are authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
We may share the notice with the user who posted the material or with third parties (e.g., Lumen Database).
3) Counter-notification
If you believe your material was removed or disabled by mistake or misidentification, you may send our designated agent a counter-notification that includes:
- Your physical or electronic signature.
- Identification of the material removed or to which access was disabled and the location at which the material appeared before it was removed or disabled.
- A statement under penalty of perjury that you have a good-faith belief the material was removed or disabled as a result of mistake or misidentification.
- Your name, address, and telephone number, and a statement that you consent to the jurisdiction of the Federal District Court for the judicial district in which your address is located, or if outside the U.S., for any judicial district in which ExoQuery may be found, and that you will accept service of process from the person who provided the original notice or an agent of such person.
If we receive a valid counter-notification, we may restore the material unless the original claimant informs us that they have filed a court action seeking to restrain the user from engaging in infringing activity.
4) Repeat-infringer policy
In appropriate circumstances, we may terminate or suspend users who are determined to be repeat infringers.
5) Misrepresentations
Under 17 U.S.C. §512(f), any person who knowingly makes material misrepresentations in a notice or counter-notice may be liable for damages, including costs and attorneys’ fees, incurred by the alleged infringer, the copyright owner, or the service provider.
Responsible Security Disclosure
If you believe you’ve found a security vulnerability, please email info@exoquery.com with details sufficient for us to reproduce the issue. Do not access or modify data that does not belong to you. We do not authorize testing against production infrastructure beyond the Playground environment.