Privacy, the short version.
Last updated · 11 September 2026
Apithings runs its sites the way it builds its products: collect as little as possible. This policy covers apithings.net and agent.tf. Here is exactly what they do — and do not do — with your data. BrickNote, the product, has its own policy at bricknote.ai.
Who we are
These sites are published by APITHINGS, a SARL registered in Lyon, France (SIREN 890 251 184, RCS Lyon, registered office 4 rue de la République, 69001 Lyon). APITHINGS is the data controller for apithings.net and agent.tf. agent.tf and Agent Task Force are trading names of the same company. We have no obligation to appoint a data protection officer and have not appointed one; privacy questions reach the gérant directly at contact@apithings.net. Full company details: apithings.net/legal.
What the sites collect
As little as possible. Both are static sites with no account, no login and no web form. Neither sets a cookie nor keeps anything on your device — with one exception we would rather write down: on load, PostHog’s library checks whether local storage works by writing a value it reads back and deletes at once. Nothing of it remains and nothing in it identifies you. We use PostHog, hosted in the EU, to count page views and see which links are useful — configured with in-memory persistence only, no autocapture, no session recording, no person profiles, and the path of the page rather than its full address. Nothing survives the tab you close, no profile is built, and nothing is sold or shared. The legal basis is our legitimate interest in knowing whether the sites work (art. 6.1.f GDPR). The measurement keeps nothing on your device and builds no profile; the one access it makes is the availability check described above, written and deleted in the same breath. Whether that brings it inside art. 82 of the loi Informatique et Libertés is a question we have written down rather than waved away — see docs/legal/REGISTRE-TRAITEMENTS.md — and the key that would switch this on is not set today. Aggregate counts are kept for at most 13 months.
Server logs
Like any website, our host keeps standard technical request logs (IP address, timestamp, page requested, browser) to serve the pages and guard against abuse — our legitimate interest in a working, non-abused site. Both sites are hosted by Vercel Inc. Their server-side processing is pinned to the Vercel region fra1, which is Frankfurt, Germany; the pages themselves are static and reach you from the nearest point of presence on the host’s global network, wherever that is. Vercel operates its platform from the United States as well, so some processing — support, security, platform operations — may take place there, framed by the European Commission’s standard contractual clauses. Vercel keeps these logs under its own retention policy; we do not use them to identify or track you.
When you email us or book a call
If you write to hello@agent.tf or contact@apithings.net, or book a call through the link on agent.tf, we receive your message, your email address and whatever you chose to tell us, so that we can reply and prepare the conversation. The legal basis is the pre-contractual steps you asked for (art. 6.1.b GDPR). We use it only for that, never add you to a mailing list, and delete it three years after our last exchange unless it has become part of a contract, where our accounting obligations take over. Our mailboxes are hosted by Microsoft (Microsoft 365); a booking page, when one is linked, is run by its provider under its own policy.
Who else sees it
Only the providers that run the sites for us: Vercel (hosting), PostHog (audience measurement, EU), and Microsoft (our mailboxes). Each acts as our processor under a written agreement and on our instructions. We sell nothing, and we share nothing with advertisers — there are no advertisers.
Your rights
Under the GDPR you can ask us to access, correct, or delete any personal data we hold about you, to restrict or object to how we use it, or to receive it in a portable form. Email contact@apithings.net and we will answer within one month. You may also lodge a complaint with the CNIL, the French data-protection authority (cnil.fr).
Changes
If this policy changes, we will post the new version here with an updated date above.