Privacy notice

Effective 5 November 2026. This notice covers the Empiria Local SEO MCP at mcp.empiriainsight.com.

Controller and contact

Empiria Insight UG (haftungsbeschränkt), represented by Lukas Kawerau. Our postal address and registration details are in the legal notice. Contact: kontakt@empiriainsight.com. The publisher privacy policy describes privacy rights and how to contact us about them.

Inputs and audit results

The server processes requested public URLs, downloaded public pages and any snapshots or data records you submit to produce a response. These inputs and results are held temporarily in memory for the request and returned to your MCP client. They are not written to an inquiry database or stored as leads. There is no email-sending or inbox feature. Do not submit confidential information or personal data that is unnecessary for the check. Your MCP client and AI provider process their copy according to their own policies.

Operational telemetry

To operate and secure the service, application logs contain fixed route and tool names, status, duration, timestamps, randomly generated request/tool IDs and fixed error codes. They do not contain audited URLs, URL queries, HTML, imported records, contact fields, client IP addresses, client user agents, authorization headers or secrets. The direct proxy address is used temporarily for in-memory rate limiting.

Container logs rotate at 10 MiB per file with three files. Central operational logs are retained for 14 days, subject to an 8 GiB service-wide size limit; metrics for 30 days. The service is hosted on our existing Hetzner infrastructure in Germany and delivered through Cloudflare. Network providers process connection metadata for delivery and security under their respective policies; the application logging exclusions above describe our MCP application.

Service event counts

Our self-hosted Umami instance receives tool name, execution outcome, duration, transport and, for audits, finding count. It receives a fixed service hostname and /mcp, not your audited URL, inputs, IP address, user agent or a visitor identifier. No statistics cookie is set. These events measure service calls, not unique users. Event data remains until the operator deletes it; no automatic expiry is currently configured for these aggregate events.

Send HTTP DNT: 1 or Sec-GPC: 1 to suppress Umami event collection for your call. Necessary operational logs and metrics remain enabled. We do not sell submitted audit data or use it to train a model.

Email you choose to send

If you contact us separately by email, your own email client sends that message. We handle that correspondence under the publisher privacy policy. The MCP does not send or subscribe you to messages.