Privacy Policy

OSTARA.WORK respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation, GDPR, and applicable French legislation.

This carefully detailed Privacy Policy explains how personal data may be processed when you visit this website, use services operated by OSTARA.WORK, or purchase products or services through the OSTARA.WORK online store.

Data Controller

OSTARA.WORK

Micro-entreprise established in France.

Electronic Mail: [email protected]

Website Operation

The main OSTARA.WORK website is a static website. Thus, it does not require user registration and does not intentionally collect personal information through forms, advertising technologies, behavioural tracking, or analytics services.

Hosting and Technical Processing

This website is delivered through Cloudflare Pages

As part of providing secure and reliable hosting, Cloudflare may temporarily process technical information such as IP addresses, browser information, request metadata and security logs. Such processing is performed to deliver the website, maintain service availability, detect malicious activity and protect against abuse.

OSTARA.WORK does not use this information for advertising, profiling, behavioural analysis or commercial surveillance.

XSS Lab

Certain educational webpages, such as xss-lab.pages.dev, may read values supplied in the page URL (for example, query parameters or URL fragments) solely within the visitor's browser for the purpose of demonstrating web security concepts. These values are not transmitted to OSTARA.WORK servers and are not stored or processed by OSTARA.WORK

Klasker AITA

Klasker AITA is an experimental website-analysis service operated by OSTARA.WORK, and it allows visitors to submit publicly accessible website URLs and/or domain addresses for technical analysis, with a keen interest on Artificial Intelligence Trade Analysis and the emerging protocols for Agentic AI eCommerce.

At least, the protocols analysed are ACP (Agentic Commerce Protocol), UCP (Universal Commerce Protocol), AP2 (secure agentic payments layer, by Google), MPP (Machine Payments Protocol), Mastercard Agent Pay, TAP (Visa Trusted Agent Protocol), MCP (Model Context Protocol) and its own server, A2A (Agent-to-Agent) with the underlying JSON-RPC and HTTP protocols, and finally, KYA (Know Your Agent) based on ISO 27001 and GDPR (General Data Protection Regulation).

When a website URL or domain address is submitted to the analysis system of Klasker AITA, the submitted URL, domain address and technical information obtained from the target website may be processed for the purpose of performing and displaying the requested analysis. This may include the target URL, domain name, HTTP response information, security headers, HTML metadata, structured data and other publicly accessible technical characteristics of the target website.

www.klasker.com does not intentionally request passwords, authentication credentials, payment-card information or other private credentials from target websites. Visitors should not submit URLs containing confidential information, passwords, access tokens, session identifiers or other information that they do not wish to have processed. Analysis requests and results may be temporarily stored for caching, reliability, to improve operational services, and security purposes.

Klasker Observatory

Also known as Observatory AITA, the Klasker Observatory provides publicly accessible experimental analyses of selected websites. Website URLs submitted to the Observatory may therefore be associated with publicly displayed technical analysis results.

Observatory AITA is intended to analyse publicly accessible website characteristics and is not intended for confidential, private or any form of authenticated content.

Klasker Technical Infrastructure

Klasker AITA uses third-party infrastructure providers to operate its website-analysis service. These may include Cloudflare for website delivery and API infrastructure, Ably for realtime analysis status and results, hostUNO for scanner infrastructure, and TiDB Cloud for storage of analysis data.

These providers may process technical information and service data as necessary to provide, secure and maintain the Klasker AITA service, subject to their respective terms, privacy policies and applicable data-protection requirements.

Online Store

Digital products, memberships and other commercial services are displayed in the OSTARA.WORK online store powered by Payhip

When you visit the store or purchase a product, personal data necessary to process your order may be collected and processed by Payhip and its payment providers. This may include your name, email address, billing details, payment information, purchase history and other information required to complete the transaction.

OSTARA.WORK receives only the information necessary to process customer orders, provide customer support and comply with accounting, taxation and other legal obligations.

Payment card information is processed directly by the relevant payment providers and is not stored by OSTARA.WORK

Legal Basis for Processing

• Performance of a contract, including processing purchases and delivering products or services.
• Compliance with legal obligations, including accounting and taxation requirements.
• Legitimate interests, including maintaining the security and integrity of the website.

Cookies

The main OSTARA.WORK website does not use cookies for advertising, behavioural profiling or visitor analytics.

However, certain cookies may nevertheless be used where technically necessary for website operation, security or when accessing third-party services such as the online store or payment providers.

Data Sharing

OSTARA.WORK does not sell, rent or trade any form of personal data.

Personal data may be processed by trusted service providers acting on behalf of OSTARA.WORK where necessary to provide website hosting, eCommerce services, payment processing, Klasker website-analysis services, realtime communications, data storage or other legally required functions by the laws of France.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes and enforce contractual rights.

Your Rights

Subject to applicable law, you have the right to:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request deletion of your personal data where applicable.
• Request restriction of processing.
• Object to certain processing activities.
• Request data portability where applicable.

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés, CNIL

Third-Party Services

This website may contain links to third-party websites or services. OSTARA.WORK is not responsible for the privacy practices of external websites. Visitors should consult the privacy policies of those services before providing any form of personal information.

Changes to this Policy

This webpage defining the Privacy Policy may be updated from time to time to reflect legal, technical or operational changes. The latest version published on this website shall apply.

Privacy Policy updated on September 17, 2026.