Yaarbal — Privacy Notice
1. Overview
This Privacy Notice describes how yaarbal processes personal data in connection with the Service. EU users are in scope of this notice. Yaarbal is committed to compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This notice supersedes the prior privacy page at yaarbal.app/privacy.
Yaarbal is a peer-to-peer inference routing network. Prompts you submit are routed to independent peer operators (seeders) who run the model inference. The tracker (yaarbal's central component) handles peer discovery, credit settlement, and rate limiting — but does not store your prompt text. The peer operator receives and processes your prompts directly.
2. Data We Process
The following table describes the personal data elements processed by the yaarbal tracker and network, the purpose and lawful basis for processing, and the retention period for each element.
| Data Element | Purpose | Lawful Basis | Retention |
|---|---|---|---|
| Prompt text | Inference routing to peer seeder | Contractual necessity | Not stored by tracker; visible to serving peer only during inference |
Ephemeral peer ID (yaarbal-ephemeral-peer-id-v1) |
Credit ledger; rate limiting | Legitimate interest (service operation) | Until localStorage cleared by user |
| IP address (request origin) | Rate limiting; abuse prevention | Legitimate interest | Hashed/truncated; ≤30 days |
| Credit balance | Service operation; payment settlement | Contractual necessity | Duration of service use |
Ed25519 public key (peer_id) |
Identity; settle-auth verification | Contractual necessity | Duration of seeder participation |
| Inference usage metrics (token counts, timestamps) | Service operation; billing | Legitimate interest | Aggregates only beyond 30 days |
3. Your Rights
If you are located in the European Union or another jurisdiction with applicable privacy rights, you may have the following rights with respect to your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to erasure: You may request deletion of your personal data, subject to our legal obligations and legitimate interests.
- Right to data portability: You may request your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interest.
- Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority.
To exercise your rights, contact us at privacy@yaarbal.app. We will respond within the timeframe required by applicable law (typically 30 days).
4. Contact
Questions about this Privacy Notice should be directed to privacy@yaarbal.app.