Privacy policy
This notice explains how EntityGap (entitygap.com) processes personal data, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
1. Data controller
Sara Borghi, Via del Murazzo 63, 41123 Modena, Italy, VAT no. 02652360229. Email: [email protected]. No Data Protection Officer has been appointed, as it is not required.
2. How EntityGap works, in short
EntityGap requires no account. The analysis runs in your browser: reports, pasted texts and results are not saved on our servers. To read web pages, look up Google results and recognise entities, the browser sends a few requests to our server (api.entitygap.com, hosted on Cloudflare), described below.
3. Data we process, purposes and legal bases
- Browsing and security data: IP address, browser type, date and time, requested address. Used to deliver the site, protect it from abuse and limit excessive use (for example, a maximum number of Google searches per hour per connection, for which the IP address is kept for up to 1 hour). Legal basis: our legitimate interest in the security and sustainability of the service (Art. 6(1)(f) GDPR).
- Analysis requests: the page addresses you enter, the target search and the market, and the names of the entities found on the pages. They are used only to read the pages, retrieve Google results and look up entities on Wikidata, that is, to provide the service you request (Art. 6(1)(b) GDPR). Texts you paste are processed only in your browser.
- Technical logs: our server keeps technical logs of requests (which may include the IP address and the requested address) for troubleshooting and security, for up to 7 days. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Emails you send us: if you write to us, we use your address and message only to reply (Art. 6(1)(b) GDPR) and keep them for as long as needed to handle the request.
The web pages you analyse are public pages chosen by you and may contain personal data (for example, names of people listed on a site). They are read automatically only to produce the report and are not stored, apart from the temporary caches described in section 6. Please avoid pasting texts that contain other people's personal data when not needed.
4. Who receives the data
- Cloudflare, Inc. (USA): hosting, our server, page reading and rendering (Cloudflare Browser Rendering), security and rate limiting. Cloudflare acts as our data processor under its data processing agreement.
- DataForSEO: receives only the target search and the market, to return Google results. No personal data is sent.
- Wikimedia Foundation (Wikidata, USA): receives the names of entities found on the pages, through our server. Only if our server is unavailable does your browser contact Wikidata directly, which then sees your IP address.
- Websites you analyse: our server visits them to read their content; they see the address of our server, not yours.
- Google Cloud Natural Language (Google LLC): only if you choose the Google engine and enter your own API key. In that case your browser sends the page text directly to Google, under the terms of your Google Cloud account. We do not receive your key.
- Buy Me a Coffee: the “Buy me a pizza” buttons are plain links. Only if you click one are you taken to buymeacoffee.com, where any payment is handled by Buy Me a Coffee under its own privacy policy. We receive no payment card data.
Fonts are hosted on our own domain: no data is sent to Google Fonts. The site uses no analytics or advertising tools.
5. Transfers outside the EU
Cloudflare and the Wikimedia Foundation are based in the United States. Transfers take place under the EU-US Data Privacy Framework, where the recipient is certified, and/or the European Commission's standard contractual clauses (Arts. 45–46 GDPR).
6. Retention
- IP address for usage limits: up to 1 hour.
- Technical logs: up to 7 days.
- Temporary caches on our server: page content up to 24 hours; Google results and Wikidata lookups up to 7 days. Caches contain search terms and public page content, not the identity of who made the request.
- Data in your browser (see the cookie policy): until you delete it.
7. Your rights
You can ask for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Arts. 15–22 GDPR), by writing to [email protected]. As we do not collect names or accounts, we may need some details (for example, the date and time of use) to find your data. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
8. Other information
Providing data is optional, but without the requested addresses the analysis cannot be carried out. No automated decision-making producing legal or similarly significant effects on people takes place: the score concerns web pages, not individuals. The service is intended for businesses and professionals, not for minors. This policy may be updated; the current version is always on this page.
