Datenschutzerklärung — Last updated: July 2026
This policy explains what personal data MOJAQ processes, why, on what legal basis, who it is shared with, and the rights you have under the EU General Data Protection Regulation (GDPR). It applies to visitors of mojaq.com, people who create a beta account, and anyone who contacts us.
The controller responsible for the processing described here is MOJAQ, an independent developer-tools service established in the European Union. For any privacy matter, contact [email protected]. Our Legal Notice contains the currently published provider information and explicitly identifies the statutory legal-name and address details that are not yet published during the free private beta.
We have not appointed a Data Protection Officer, as we are not legally required to.
| Activity | Data | Purpose | Legal basis (Art. 6) |
|---|---|---|---|
| Website visit | IP address, user-agent, timestamp, pages requested | Deliver and secure the site | Legitimate interest (f) |
| Analytics | Cookieless event and session records, including page, referrer, country/device metadata and rotating pseudonymous identifiers; no cross-site tracking or advertising profiles | Produce traffic and product-usage reports | Legitimate interest (f), subject to the customer's configuration and instructions |
| Beta account | Email address, password (stored only as a salted hash) | Create and run your account | Contract / pre-contract (b) |
| Contact | Name, email, message | Answer your enquiry | Legitimate interest (f) |
| Account emails (when enabled) | Email address | Verification, security and service notices | Contract (b) |
| AI gateway (optional) | The requests you send through it | Forward to the AI provider you configure | On your instruction — we act as your processor |
We do not sell personal data and there are no advertising or third-party tracking services in our data path. We rely on the following processors:
MOJAQ's core application databases and service storage are hosted in the European Union (Helsinki, Finland). International processing still occurs where Cloudflare handles request and connection data at its global edge. Resend is an additional international path only when transactional email delivery is enabled; it is disabled for the current private-beta release. The applicable safeguards must be confirmed in the current contracts and provider documentation; this policy does not itself prove SCC execution or Data Privacy Framework coverage. If you enable the AI gateway, the provider you configure may process data outside the EU, and you must assess that provider and transfer path.
You have the right to access (Art. 15), rectification (16), erasure (17), restriction (18), data portability (20) and objection (21), and to withdraw any consent at any time. Exercise them via [email protected]. You also have the right to lodge a complaint with your competent data-protection supervisory authority.
We use only essential cookies for session and security purposes and set no advertising cookies. MOJAQ analytics is cookieless by design. Whether a consent banner or another disclosure is required still depends on your configuration, jurisdiction and use case; obtain appropriate advice rather than relying on the absence of cookies alone.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
Published controls include TLS on public endpoints, encrypted backups, modern salted password hashes and database tenant-isolation policies. Core service storage is in Helsinki; the international processing paths are described above. Current operational details are on our Trust & security page.
MOJAQ is a tool for developers and is not directed at children under 16.
We may update this policy; the "last updated" date above always reflects the current version. Material changes affecting account holders will be communicated by email.