Privacy & cookies

Who is responsible

K8 Institut für strategische Ästhetik gGmbH
Keplerstr. 3-5, 66117 Saarbrücken, Germany
info@k8.design

We run this tool for the Twin4Resilience project (Interreg North-West Europe).

What we store

• The answers you type into steps 1–7.
• The AI suggestions and the teaching plan generated for you.
• The status of each step (for example, whether you have confirmed it).
• Technical timestamps (for example, when your session was created and last used).
• A count of the AI generations you have used.
• Hashes — never the plain values — of your resume link and of any assistant code.

We do not ask for your name or email address and we do not need personal data to run the tool. Please don’t enter personal data about yourself or other people in the free-text fields.

Cookies and browser storage

The tool sets exactly one functional cookie:

• Name: t4r_ljd_session
• Contents: only signed, random identifiers of your current journey and of up to 10 earlier journeys started in this browser (so you can pick one to continue) — nothing about you.
• Purpose: it is needed to save your progress.
• Settings: HttpOnly, Secure, SameSite=Lax.
• Lifetime: 30 days, renewed whenever you use the tool.

There are no analytics, advertising or tracking cookies, and no third-party cookies.

The tool also keeps a copy of your unsaved drafts in your own browser’s local storage, so that reloading the page does not lose your work, plus small settings such as whether you accepted this notice. This stays on your device; you can clear it at any time in your browser settings.

How long we keep it

Everything is deleted automatically 30 days after your last activity. You can delete it immediately with “Delete my session” in the tool.

AI processing

When you ask for suggestions (step 5) or for the teaching plan (step 7), your answers from steps 1–4 (and your step 6 notes) are sent to Mistral AI, a European AI provider, to generate the result.

If your own AI assistant sends the tool a summary of what the learner already knows (step 4), that summary is also sent to Mistral AI, so the tool can mark the matching MLUs. The summary should describe skills and experience only; please make sure it contains no names, contact details or other personal data.

Identical inputs may be answered from a cache of past results for up to 30 days.

Your own AI assistant (optional)

If you choose to connect ChatGPT, Claude, Mistral Vibe or another assistant to the tool, what that assistant sees is governed by that assistant’s own terms, not by K8’s.

Resume links

Anyone who has your resume link can open your session, so treat it like a password. You can create a new link at any time; doing so invalidates the old one.

Server logs

The tool’s own logs record technical events (for example, that a step was confirmed or an AI generation ran) without the text you type, without IP addresses, and with session identifiers only as a short one-way hash.

IP addresses are used only to enforce fair-use limits (AI generations, imports and assistant requests) and are kept for at most one hour for this. The web server in front of the tool keeps standard access logs (time, IP address, requested address) for the security and operation of the service; these are deleted automatically after a limited period.

Your rights

Under the GDPR you have the right to access your data, to have it deleted, and to lodge a complaint with a data protection supervisory authority. To exercise your rights or ask questions, contact info@k8.design.