Privacy Policy
Last updated: 17 October 2026
1. Who is responsible
Wolkra ("we") is responsible for the processing described here. For anything about your personal data, write to [email protected].
2. This website
The website wolkra.com, including its documentation, does not use cookies, analytics or advertising trackers.
- Server logs. When you visit the website, our web servers process your IP address, the requested page, date and time, and your browser's user agent to deliver pages and protect the site. These logs are kept for at most 30 days.
- Theme preference. If you choose a light or dark theme, the choice is stored in your browser's local storage. It never leaves your device.
- Pricing and status pages load current prices and the platform status from our API. These requests contain no personal data beyond what is listed under server logs.
3. Your account and the services
When you use the console and the services we process:
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email address, password hash, two-factor settings | Your account and login | Contract (Art. 6(1)(b)) |
| Login sessions: IP address, browser, time | Security of your account; you can see and end your sessions | Contract; legitimate interest in security (Art. 6(1)(f)) |
| Organizations, projects, resources and their settings, audit log | Providing the services | Contract |
| Balance, payments, usage and statements | Billing | Contract; legal obligations (Art. 6(1)(c)) |
| Support tickets and abuse reports | Support and handling abuse | Contract; legitimate interest |
| Descriptions you give the Composer assistant | Drafting a stack document for you | Contract |
Cookies in the console. The console uses a session cookie (wk_session) to keep you logged in and a security
cookie (wk_csrf) to protect against cross-site request forgery. Both are strictly necessary.
Data on your servers. We do not access the content of your servers or volumes, except where you ask us to (for example in a support case) or where the law requires it. For personal data you store on the services, you are the controller and we process it only on your instructions. Customers who need a data processing agreement can request one at [email protected].
4. Who receives data
We use these service providers, each only for the purpose listed:
- Payments: Stripe Payments Europe, Ltd. (Dublin, Ireland). You enter card details directly with Stripe; we never see the full card number. Crypto top-ups do not go through Stripe: they are made on the public TRON blockchain, where the transaction is visible to anyone, and we record it with your top-up to credit your balance.
- Email delivery: Amazon Web Services EMEA SARL (Luxembourg), using its Frankfurt, Germany region, sends account and billing emails.
- Infrastructure: your servers and our platform run in data centres in Frankfurt, Germany.
- Network and DNS: Cloudflare, Inc. protects and delivers our website and console.
- Composer assistant: if you use it, the description you type and the resources it needs to know about are sent to Anthropic PBC to draft the stack document. Nothing is sent unless you use the assistant.
- Sign-in with Google or GitHub, if you choose it: Google or GitHub receives the request to sign you in.
Some of these providers are based outside the EU/EEA or may access data from there. Where that happens, transfers rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework) or the European Commission's standard contractual clauses.
We do not sell personal data or use it for advertising.
5. How long we keep data
- Account data: while your account exists, and deleted when you delete your account.
- Billing records (payments, statements): as long as tax and accounting rules require, typically up to 10 years.
- Login sessions: until they expire or you end them; session history for up to 90 days.
- Website and API server logs: up to 30 days.
- Support tickets: while your account exists.
6. Your rights
You can ask to access, correct or erase your personal data, restrict or object to its processing, or receive it in a portable format. You can see your data and delete your account in the console. To exercise any other right, write to [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority.
7. Changes
We update this policy when our processing changes, and show the date of the last update at the top.