Privacy Policy

The Unified Product Graph website (unifiedproductgraph.org) is operated by Arkheiev UG ("we", "us", "our"), trading as The Product Creator. This policy explains what data we collect, why, and how we handle it.

The short version

This is a documentation and specification website. We do not require accounts and we do not set any cookies. We use privacy-friendly, cookieless analytics that store nothing on your device and never identify you, and we do not sell or share your data with anyone.

What we collect

Server logs

When you visit this site, our hosting provider (Vercel) may log standard request data including your IP address, browser user-agent string, the pages you visit, and timestamps. These logs are used solely for security monitoring and debugging.

Analytics

We use PostHog (hosted in the EU) to understand how the site is used in aggregate, such as which pages are visited and how the site performs. It runs in a cookieless, consent-free configuration: it stores nothing on your device (no cookies, no local storage), creates no persistent profile, never identifies you, and does not follow you across sessions or other websites. Your IP address is discarded by PostHog and is not stored. Because nothing is stored on or read from your device, this analytics does not require a consent banner under the ePrivacy Directive or the German TTDSG.

Local storage

We store a single value in your browser's localStorage to remember your preferred colour theme (light or dark). This data never leaves your device and is not transmitted to any server.

Fonts

This site uses Google Fonts (Sora and Space Mono). These fonts are self-hosted via Next.js at build time, so your browser downloads them from our domain, not from Google's servers. No data is transmitted to Google when you visit this site.

Content delivery

Blog articles and some documentation content are served via Sanity.io's content delivery network (CDN). When images from our blog are loaded, your browser connects to cdn.sanity.io, which may process your IP address as part of standard CDN operation.

Feedback submissions

The Unified Product Graph tools (the CLI and the MCP server used in editors like Claude, Cursor, and others) include an optional way to send us feedback: bug reports, feature requests, and observations. This is entirely voluntary and happens only when you choose to submit.

What a submission includes

When you send feedback, we receive the text you write (a title, a description, and any structured details you add) plus a small amount of technical context to help us act on it: the UPG version you are on, the name and version of the MCP client you are using, an optional product-stage label, and coarse counts of the entities and edges in your graph. We never receive the contents of your product graph. No node titles, descriptions, or data, only counts.

What we deliberately do not store

We do not store your IP address or user-agent with your feedback. Your IP is used only briefly by our rate limiter (Upstash) to prevent abuse, held for a short window and then expired, and is never attached to your submission. Feedback is anonymous: there is no account, and we do not ask for or attach your name or email.

Please keep it impersonal

Because feedback is free text, please do not include personal information such as names, emails, or credentials. If you do, it is stored as part of your submission until we process it.

Why we collect it, and for how long

We process feedback under our legitimate interest in fixing and improving the Unified Product Graph. Submissions sit in a private queue only as long as needed to triage and act on them, then they are resolved or deleted. To have one removed, contact us, though since feedback is anonymous you will need to identify the submission so we can find it.

What we do not collect

No cookies of any kind. No cross-site tracking. No email addresses, names, or personal information, unless you choose to include it in feedback you send us (see Feedback submissions). No user accounts or authentication. No payment or financial information. No behavioural profiling or fingerprinting. Our analytics is anonymous and never builds a profile of you or follows you between visits.

Third-party services

Vercel: Hosting and CDN, processes IP addresses in server logs. PostHog (EU region): Privacy-friendly, cookieless product analytics, aggregate and anonymous usage only, with IP addresses discarded and not stored. Sanity.io CDN: Content delivery, processes IP addresses for image requests. GitHub: Source code hosting, no visitor data shared. Supabase: Database that stores the feedback submissions you choose to send us. Upstash: Rate-limiting for the feedback endpoint; briefly processes your IP address to prevent abuse, then discards it.

Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. Since we collect almost no data and our analytics is anonymous, most of these rights are already satisfied by default. Contact us at hello@theproductcreator.com.

Children's privacy

This site is not directed at children under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date.

Contact

Email: hello@theproductcreator.com. Entity: Arkheiev UG, trading as The Product Creator.