Privacy Policy

1. An Overview of Data Protection

General Information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term "personal data" comprises all data that can be used to personally identify you.

Data Recording on This Website

Who is the responsible party for the recording of data on this website?

The data on this website is processed by the operator of the website, whose contact information is available under section "Information about the responsible party" in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance, be information you enter into our contact form. Other data is recorded automatically by our IT systems when you visit this website. This data primarily includes technical information (e.g., web browser, operating system, or time the site was accessed).

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time. You also have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to object to the processing of your data (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR). Furthermore, you have the right to log a complaint with the competent supervising agency.

2. Hosting

Vercel

We host the content of our website with the following provider: Vercel (440 N Barranca Ave Suite 4133 Covina, CA 91723 United States).

Vercel is a tool for building and hosting websites. When you visit our website, your data (including IP addresses and server log files) is processed on Vercel's servers. This may also involve the transfer of personal data to the parent company of Vercel, Vercel Inc., 8 Clarkson St, New York, NY 10014, USA. Vercel also stores cookies that are required for the display of the site and to ensure security (necessary cookies).

The use of Vercel is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. The data transfer to the US is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission. Details can be found in Vercel's Privacy Policy.

Data Processing Agreement (DPA)
We have concluded a Data Processing Agreement (Auftragsverarbeitungsvertrag) with the above-mentioned provider in accordance with Art. 28 GDPR. This is a contract mandated by data privacy laws that guarantees that the provider processes personal data of our website visitors only based on our instructions and in compliance with the GDPR.

Umami Analytics (Cookie-less)

We use Umami Analytics via the script loaded from https://umami.andrewru.com/script.js. Umami is configured in a cookie-less mode and is used to measure basic website usage such as page views and aggregated technical metadata (for example referrer, browser, and device category). We do not use this setup to identify individual visitors, and we do not intentionally process names, email addresses, or other direct personal identifiers via Umami.

The processing is based on Art. 6(1)(f) GDPR (legitimate interest) to operate, maintain, and improve the reliability and usability of our website.

Vercel API Routes and Upstash KV (Free-Tier Enforcement)

We operate server-side API routes (for example under /api/v1/free/* and /api/v1/license/*) on Vercel to provide licensing and free-tier enforcement functionality for the Context Master VS Code extension. For free-tier enforcement, we use Upstash (Redis-compatible Key-Value Store) to store pseudonymous usage counters keyed by a hashed machineID identifier.

This processing is necessary to enforce free-tier business rules (such as daily call limits and abuse prevention), ensure fair resource allocation, and protect service stability. The legal basis is Art. 6(1)(f) GDPR (legitimate interest), and where applicable Art. 6(1)(b) GDPR for processing required to provide the service requested by the user. Upstash-backed usage keys are configured with automatic expiration.

3. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this Privacy Policy.

Information about the responsible party

The responsible party for data processing on this website is:

LuGoSoft
Thalkirchner Str. 47
80337 Munich, Germany
Email: info@context-master.dev

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

Storage Duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data.

4. VS Code Extension (Context-Master)

Payment Processing and Licensing via LemonSqueezy

If you purchase a license for our VS Code extension, the transaction is processed and fulfilled by our Merchant of Record, LemonSqueezy (Lemon Squeezy LLC, 222 Main Street Suite 500 Salt Lake City, UT 84101 United States). As the Merchant of Record, LemonSqueezy acts as an independent Data Controller for your payment, billing, and transaction data. We do not process or store your credit card information. We only receive access to non-financial data (such as your email address, license key, and order status) to verify your active license within the extension. This processing is based on the performance of a contract (Art. 6(1)(b) GDPR).

Error Tracking & Telemetry via Sentry

We use Sentry, provided by Functional Software, Inc. (45 Fremont St, 8th Floor, San Francisco, CA 94105), to monitor errors and crashes within the Context-Master VS Code extension. This helps us to quickly identify and fix bugs. If the extension crashes, anonymous technical data (e.g., operating system version, stack traces) is transmitted to Sentry.

User Control & Opt-Out: We deeply respect your privacy. The Context-Master extension strictly adheres to the global VS Code Telemetry settings. If you have disabled telemetry globally in VS Code, our extension will not send any data to Sentry. Additionally, we provide a custom setting within the extension to explicitly disable error tracking.

Data Protection & Code Scrubbing: We have strictly configured Sentry to filter and block the transmission of personally identifiable information (PII) and your proprietary source code snippets. The use of Sentry is based on our legitimate interest in providing a stable and secure application (Art. 6(1)(f) GDPR), safeguarded by your ability to opt-out. We have concluded a Data Processing Agreement (DPA) under Art. 28 GDPR with Sentry, and data transfers to the US are safeguarded by the EU-US Data Privacy Framework (DPF).