Privacy Policy
High Five, AI! service (high5ai.app). Effective from .
This policy explains what personal data we process when you use the High Five, AI! service, why, on what legal basis, for how long, and who receives it. It covers the website high5ai.app and the service at api.adinspire.com that the website uses.
1. Controller and contact
- Controller
- ADINSPIRE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, a limited liability company under Polish law (Adinspire, we, us)
- Registered office and address
- ul. Grzybowska 87, 00-844 Warsaw, Poland
- Register
- National Court Register (KRS) no. 0000476999. Registry court: Sąd Rejonowy dla m.st. Warszawy w Warszawie (the District Court for the Capital City of Warsaw)
- Tax and company IDs
- NIP (Polish tax ID) 5272702144, REGON 146897155
- Contact
- mch@adinspire.com (also for personal data matters and the rights in section 8)
2. The most important points
- Visitors have no accounts, logins, emails or payments. The service is free. You only give us the address of the site to check.
- We store your IP address with a counter and a date, only to enforce the limit of 5 checks per day. The entry disappears after about 25 hours. The IP address does not go into the report.
- The report (results, score, excerpts of the checked site's text) is stored for 180 days. Anyone who has the link can open it. There is no list of reports and no search, and report pages carry a noindex tag that asks search engines not to index them.
- The pages for visitors set no cookies and have no analytics or tracking pixels. In your browser's storage we keep only your language choice, and only after you click the language switch.
- To run a check we use service providers (listed in section 5), including an AI model that describes the checked site. The verdict and the score are calculated mechanically, without the model.
3. What data, why, on what basis and for how long
GDPR means Regulation (EU) 2016/679 of the European Parliament and of the Council. Where the basis is our legitimate interest (Article 6(1)(f) GDPR), the table states that interest.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| IP address with a counter of checks and a date. It is stored by a Cloudflare Worker running on api.adinspire.com. The IP address does not go into the report or into the system that runs the check. | Enforcing the limit of 5 checks per day from one IP address. | Article 6(1)(f) GDPR. Our interest: protecting the free service from abuse through the limit. | About 25 hours, then the entry disappears. |
| The address of the site (domain) and the language that you enter in the form. | Running the check and delivering the report. | Article 6(1)(b) GDPR (providing the service you ask for). | Until the check is done, then as part of the report and of an entry in internal statistics (next rows). Providers that help run the check have their own rules (section 5). |
| The report: domain, date, test results, score, addresses from robots.txt and the sitemap, canonical address, a preview of the checked site's text (up to 400 words), an excerpt of the text in the report data (up to 200 words), and a description of the site and its main entity (the subject the site is about) generated by an AI model. | Showing the result under a permanent link that you can share, and downloading the report as a Markdown file. | Article 6(1)(f) GDPR. Our interest: making the result of the service available under a link. | 180 days, then the report is deleted automatically. Anyone who knows the link can open it. There is no list of reports and no search, and report pages carry a noindex tag. |
| Domain history: up to the 20 latest checks of a domain (date, verdict, score, changes). It is shared by everyone who checks that domain. It contains no IP address and no user identifier. | Showing how the result of a domain changed between checks. | Article 6(1)(f) GDPR. Our interest: comparing a result with earlier checks of the same domain. | 180 days, renewed with every check of the domain. While the domain keeps being checked, an entry can exist longer than 180 days from the first check. |
| An entry in internal statistics: report identifier, domain, verdict, score, number of issues, language and dates. No IP address. | Statistics in the internal admin panel. | Article 6(1)(f) GDPR. Our interest: assessing how the service is used. | Created when a report is first opened on high5ai.app. There is no automatic deletion: the entry stays as long as it is needed for statistics. |
| The IP address and technical details of requests that our providers see: Cloudflare (an intermediary in front of high5ai.app and api.adinspire.com) and LH.pl (the hosting of the site). | Delivering the site and the service to your browser. | Article 6(1)(f) GDPR. Our interest: running the service and keeping it available. | We do not keep visit logs ourselves. The providers keep technical logs under their own rules. We do not know how long they keep them. |
| The IP address and technical details of your browser that go to Google on the home page when fonts are downloaded (Google Fonts). | Showing the home page in the font prepared for it. | Article 6(1)(f) GDPR. Our interest: a consistent look of the home page. | Under Google's rules. We do not know this period. |
| The sender's email address, the text of the message and the data you give in it when you write to us (for example a complaint, a question about your data, or a request to delete a report). | Answering the message and handling the matter. | Article 6(1)(f) GDPR. Our interest: handling correspondence and being able to show how we handled a matter. | Until the matter is handled, and then as long as claims related to it can be pursued. |
4. Data from checked sites (Article 14 GDPR)
When we check a site, we download its publicly available content. The text of such a site may contain personal data, for example the name or email address of a person who is listed on it. We do not filter it out. If your data is on a site that someone checked, this section is about you.
- Controller: Adinspire (section 1).
- Categories of data: data visible in the text of the checked site, for example a name or an email address.
- Source of the data: a publicly available website that someone submitted for a check.
- Purpose and basis: running the check and making the report available, Article 6(1)(f) GDPR.
- Where this data goes: into the report (a preview of up to 400 words of the site's text and an excerpt of up to 200 words in the report data), which is stored for 180 days, and to the AI model (the site's title and up to 4096 characters of its text). Section 5 describes the recipients.
- How to request deletion: write to mch@adinspire.com and give the link to the report (an address starting with https://high5ai.app/r/). Your other rights are described in section 8.
We do not have contact details of these people, which is why we inform them here.
5. Recipients of data
To run a check and operate the service we use the following providers.
| Recipient | What it receives | Why |
|---|---|---|
| Cloudflare | The IP address and requests to the service (Cloudflare is an intermediary in front of high5ai.app and api.adinspire.com). It also stores reports, check history and the limit counter. | Delivering the site and the service, and storing reports, history and the counter. |
| LH.pl | Technical details of requests to the site high5ai.app, and the entries in internal statistics (section 3). | Hosting of the site and storing these entries. |
| Trigger.dev | The domain, the language and the result of the check. We have not established how long this provider keeps the data. | Starting the check. |
| Scrapfly, and ScraperAPI as a fallback | The address of the checked site. | Downloading the content of the checked site. |
| OpenRouter and the model provider chosen by OpenRouter (by default the OpenAI model gpt-5-mini) | The title of the checked site and up to 4096 characters of its text. They do not receive your IP address. | The description of the site and its main entity in the report. |
| Common Crawl | A query about the domain. | Checking whether the site is in the public archive. |
| Google (Google Fonts) | The IP address and technical details of your browser when it downloads fonts on the home page. | Showing the fonts. |
The checked site receives requests from our servers and from the servers of providers that download pages, not from your IP address.
6. Transfers outside the European Economic Area
Some of the providers in section 5 may process data outside the European Economic Area (EEA). In that case we use the mechanisms required by Chapter V of the GDPR, including standard contractual clauses or adequacy decisions, where they are required. You can get information about these safeguards by writing to mch@adinspire.com.
7. Cookies and browser storage
- Cookies: the pages for visitors do not set cookies. There is no analytics and there are no tracking pixels.
- Admin panel: the internal admin panel (address /panel/) sets the session cookie
h5panel. Only people who open that address get it, and it is used only to log in the administrator. It ends together with the session. - Browser storage (localStorage): the key
hf-landing-langwith the valueploren. We save it only when you click the language switch on the home page, and only to remember your choice. The entry does not expire on its own, but you can delete it at any time in your browser settings. - Report export: the Markdown file is created in your browser.
- Cloudflare: if, for some of its features, Cloudflare, which stands between you and the service, sets its own technical cookie, that cookie comes from Cloudflare and works under that provider's rules.
We show no cookie banner because nothing that we store on your device goes beyond what is needed for the service to work and to remember the language you chose.
8. Your rights
You have the right to:
- access your data (Article 15 GDPR),
- have your data rectified (Article 16),
- have your data erased (Article 17),
- restrict processing (Article 18),
- object to processing based on our legitimate interest, on grounds relating to your particular situation (Article 21),
- data portability, to the extent that Article 20 applies,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
To use these rights, write to mch@adinspire.com. A link to the report or the domain name will help us. We will answer without undue delay and at the latest within one month of receiving your request. We do not base processing on consent, so there is no consent to withdraw.
9. Is providing data mandatory
Giving the address of a site is voluntary, but without it we cannot run the check. Apart from the site address we ask for no data: there are no accounts, emails or payments. Your browser sends your IP address automatically with every connection to the service.
10. AI model and automated decisions
The AI model (section 5) only describes the text of the checked site: it writes a short description and names the main entity. The verdict and the score in the report are calculated mechanically from the test results, not by the model. We do not carry out profiling and we do not make automated decisions about people that have legal effects.
11. Data protection officer
We have not appointed a data protection officer. For personal data matters write to mch@adinspire.com.
12. Changes and date
We may change this policy, for example when the way the service works changes or when we change providers. The current version is always at https://high5ai.app/en/privacy-policy. This policy is effective from 1 November 2026. This English version is a translation, and if the versions differ, the Polish version prevails.