Privacy notice
This notice explains which personal data Independo GmbH processes when you visit inderun.dev, the website and documentation of the open-source IndeRun SDK, and why. It covers this website only; how the SDK itself handles data in the apps that use it is described at the end. For everything else Independo does, such as its own products, the Independo privacy policy (opens in new tab) applies.
Controller
Independo GmbH, Lacknergasse 110/7, 1180 Vienna, Austria. Email: hello@independo.app. Further details are in the imprint.
Hosting and server logs
inderun.dev is served by Firebase Hosting, a Google service, through Google's worldwide content delivery network. To deliver a page, Google necessarily processes your IP address and the request itself: the time, the requested address, the referring page, and the browser and operating system your browser reports. Google processes these data on our behalf to deliver the website and to keep the service secure and available.
We do not export these request logs into our own Google project, and we do not combine them with other data. The site has no user accounts, forms or comments.
- Legal basis: our legitimate interest in delivering the website securely and reliably (Art. 6(1)(f) GDPR).
- Processor terms: Google processes the data under the Google Cloud Data Processing Addendum, which we have accepted for this project (Art. 28 GDPR).
- Transfers: because pages are delivered from Google's worldwide network, the data may be processed outside the European Economic Area, including in the United States. Google LLC is certified under the EU-US Data Privacy Framework, and Google's data processing terms include the European Commission's standard contractual clauses (Art. 45 and 46 GDPR).
- Retention: we have no access to these request logs and do not keep copies. Google keeps them only as long as it needs them to operate and secure the service.
Analytics (Google Analytics 4)
This site uses Google Analytics 4 (property G-MZ8Y963XQZ) to count
which pages are read and how visitors arrive, so we can see what developers need. It works in
two levels, and the consent banner decides which one applies.
- Without your consent (before you choose, and after you decline): Google Analytics sets no cookies and sends no identifier that recognises you. Each page view sends a cookieless signal: the page address, the referring page, browser and device type, the time, and your consent choice. Your IP address reaches Google with the request; Google Analytics 4 uses it for an approximate location and does not store it.
-
With your consent: the same data, plus the cookies
_gaand_ga_MZ8Y963XQZ, which hold a pseudonymous identifier to distinguish visitors and count returning visits. - In both cases advertising storage, ad personalisation and Google signals are switched off. We do not send Google names, email addresses or anything you type.
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor under the Google Ads Data Processing Terms, which we have accepted.
- Transfers: Google may also process the data in the United States. This rests on the European Commission's standard contractual clauses and on Google LLC's certification under the EU-US Data Privacy Framework. Despite these safeguards, access by US authorities cannot be ruled out entirely.
- Cookies with your consent rest on that consent (Art. 6(1)(a) GDPR and § 165(3) TKG 2021). You can withdraw it at any time, with effect for the future, with “Cookie settings” in the footer or with the button below; withdrawing deletes the cookies.
- The cookieless signals without consent rest on our legitimate interest in knowing which pages developers read, so we can improve the documentation (Art. 6(1)(f) GDPR). They carry no cookie and no identifier, so we cannot tell visitors apart or link a signal to you. You can object at any time (Art. 21 GDPR). Because we cannot recognise you, the objection has to come from your browser: if it sends the Global Privacy Control signal, this site does not load Google Analytics at all unless you accept cookies. Google's Analytics opt-out browser add-on (opens in new tab) and your browser's tracking protection also block the signals.
- Retention: the Google Analytics cookies expire after two years at the latest. In the property, event-level data is deleted after 2 months, and data tied to the cookie identifier after 14 months without a new visit. Reports are built from aggregated data.
Stored in your browser
Two entries in your browser's local storage keep choices you make on this site; they are
never sent anywhere: inderun-consent holds your analytics choice and
its date (asked again after 12 months), and starlight-theme holds the
colour theme you picked. Both are strictly necessary for what you asked for, so they need no
consent (§ 165(3) TKG 2021). You can delete them at any time in your browser's settings.
When you contact us
If you email us, we process your message and your contact details to answer you. This is handled like any other request to Independo, as described under “Requests, contacts, and customer relationships” in the Independo privacy policy (opens in new tab), including the providers involved and how long we keep the data.
Links to other services
Links to other websites, such as GitHub, npm, Independo and netidee, open services run by other operators, and their own privacy notices apply there. Questions, issues and contributions to IndeRun are handled on GitHub, under GitHub's terms and privacy statement.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15),
- have inaccurate data corrected (Art. 16),
- have data deleted (Art. 17) or its processing restricted (Art. 18),
- data portability (Art. 20),
- object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21),
- withdraw a consent at any time, with effect for the future (Art. 7(3)).
An email to hello@independo.app is enough. You can also lodge a complaint with a supervisory authority: in Austria the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, or the authority where you live or work.
The IndeRun SDK
This section is about the SDK, not about this website. IndeRun itself does not send usage
analytics to Independo. App-configured remote AI providers have their own data handling;
local_required blocks routing to providers that would send task data out of
the device. The SDK has no telemetry instrumentation for marketing metrics.
Changes
We update this notice when the website or the law changes.
Last updated: 10 November 2026.