Privacy policy
Chunkplay Stats has no accounts, sets no cookies and runs no analytics or advertising. We keep only the technical logs needed to run the service.
Effective 9 October 2026.
Who is responsible
The controller of personal data processed by this service is MITON AI Spice s.r.o., registered at Křižíkova 148/34, Karlín, 186 00 Praha 8, Czech Republic, company ID (IČO) 295 29 786, VAT ID (DIČ) CZ29529786 ("anex.sh", "we", "us"). You can reach us at support@anex.sh.
What we receive
When you use the app in ChatGPT or another AI assistant
Your assistant decides when to call our tools and what to send. Each call contains the tool name and its arguments, for example a player name, a season and filters such as "3rd down" or "red zone". We do not receive your conversation, your prompts, your name, your email address or your account with the assistant's provider. Assistants may attach technical metadata to a request, such as a language setting; we do not store it.
The requests reach us from the assistant provider's servers, not from your device. Your use of the assistant itself is governed by its provider's privacy policy, for example OpenAI's privacy policy for ChatGPT.
When you visit this website or call the REST API
Our servers receive your IP address, the requested URL (which includes anything you type into the player search) and the response status.
This website loads its fonts from Google Fonts, so your browser also sends your IP address to Google when you open a page. See Google's privacy policy.
What we keep and why
- Server logs: time, IP address, requested URL and status of each request, and for tool calls the tool name, its arguments, any error and the response time. We use them to run, secure and debug the service and to improve the tools. They are kept only on the server that runs the service, in log files of a fixed size: when the files are full, the oldest entries are overwritten. All of them are deleted when the service is redeployed or its server is replaced. We do not copy them to any other storage.
- Rate limiting: to prevent abuse, we count requests per IP address in memory for one minute. These counts are never written to disk. Our firewall also limits how many requests one IP address can make. When it blocks or flags a request, it records the time, IP address, requested URL and request headers, and we keep that record for 30 days.
The legal basis is our legitimate interest in operating a secure and reliable service (Article 6(1)(f) GDPR). We do not sell personal data, use it for advertising, build profiles or make automated decisions about you.
Who we share it with
The service runs on Amazon Web Services (AWS), in data centres in the United States and the European Economic Area. AWS processes the logs on our behalf under a data processing agreement. We share data with anyone else only where the law requires it.
Because some servers are in the United States, your data may be transferred outside the European Economic Area. These transfers are covered by the EU Standard Contractual Clauses in the AWS data processing agreement and by AWS's certification under the EU-U.S. Data Privacy Framework.
Your rights
Under the GDPR you have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. Write to support@anex.sh. We generally can't link log entries to a person without information you provide, such as your IP address and the approximate time of your requests. You can also complain to a data protection authority, in particular the one where you live or, in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
Children
The service is not directed at children under 16 and we do not knowingly collect their personal data.
Changes
If we change this policy, we will update this page and its effective date.