# Privacy

Canonical: https://motionspec.dev/privacy

Privacy Policy — MotionSpec

MotionSpec
← motionspec.dev

Legal

## Privacy Policy

Last updated 2026-07-14 · English summary; the binding German Datenschutzerklärung is at /Datenschutz.dc .

This policy explains how MotionSpec handles data across three surfaces: this website, the free motion check, and the hosted MCP connector at api.motionspec.dev . The service is operated by:
Fröba Sales Solutions UG (haftungsbeschränkt)
Johann-Nikolaus-Zitter-Straße 31
96317 Kronach, Germany
Managing director: Kevin Fröba · Amtsgericht Coburg, HRB 7638
Contact: hello@motionspec.dev

## What MotionSpec is

MotionSpec provides an open-source npm package and CLI, and a hosted MCP (Model Context Protocol) service that validates and compiles web-animation specifications. The MIT core runs entirely on your own machine; only the hosted connector and the free motion check involve our servers.

## The free motion check (website)

On our website (the home page and /motion-check ) you can enter any website URL for us to check for motion accessibility. We process (1) the URL you enter, to fetch and analyse the CSS it links to, and (2) your IP address, solely to rate-limit requests as abuse protection. Both rest on our legitimate interest in operating and protecting this free service (Art. 6(1)(f) GDPR). The URL you enter and the result are not stored; your IP address is held only transiently in memory for the rate limit — a 60-second window — and is not logged. There is no profiling, and no data is shared with third parties.

## Data we process (hosted MCP connector)

The connector at api.motionspec.dev/mcp exposes keyless tools ( motion_catalog , motion_validate ) and keyed tools ( motion_compile , motion_audit , motion_stats ).

Keyless tools. Nothing you submit — no specification contents, no prompts — is stored.

API key material (keyed tools). Customer keys are stored only as SHA-256 hashes in our key registry; we cannot recover plaintext keys.

Request telemetry. Per request we record the tool name, a non-identifying key label, plan tier, timestamp, outcome (ok / fail / rate-limited), and coarse performance counters via Cloudflare Analytics Engine. No specification contents, prompts, or personal data are stored in telemetry.

Operational data. Standard Cloudflare edge metadata; the connecting IP and key identity are used transiently for rate-limiting and are not retained as logs.

## What we do not do

No sale of data, no advertising profiles, no third-party analytics beyond Cloudflare infrastructure, and no storage of compiled output beyond transient processing. The website sets no cookies and uses only Cloudflare's privacy-friendly, cookieless analytics.

## Processors

Cloudflare, Inc. — hosting, Workers, KV, Analytics Engine, and email routing for hello@motionspec.dev.

npm and GitHub — distribution of the open-source package (only if you download it).

## Retention

Telemetry: aggregated counters, retained per Cloudflare Analytics Engine's default retention. API key hashes: until the key is revoked. Backups and logs: 30 days or less.

**Reports you bought.** The content of a paid report — the HTML version we hold and the PDF in our object storage — is deleted **12 months** after the report was made ready. The retrieval link stops working at the same time. What remains is the record of the transaction itself: report ID, session ID, status and timestamps. It is the proof that we delivered, and it is what a refund is matched against. Legal basis: Art. 6(1)(b) GDPR for the report, Art. 6(1)(c) and (f) GDPR for the remaining record.

This period applies only to reports you bought. The free motion check described above stores neither the URL you enter nor its result.

## Your rights (GDPR)

You have the right of access, rectification, erasure, restriction, data portability, and objection, and the right to lodge a complaint with a supervisory authority. To exercise any of these, contact hello@motionspec.dev . Legal bases: Art. 6(1)(b) GDPR (provision of the service) and Art. 6(1)(f) GDPR (abuse prevention).

This English text is a plain-language summary and is kept in sync with our binding German Datenschutzerklärung .

MotionSpec About Docs Free motion check npm Pricing Impressum Datenschutz Privacy

MotionSpec enforces reduced-motion safety and a performance budget for the motion it compiles; it is not a general accessibility guarantee and does not claim conformance with any specific accessibility law. © 2026 Fröba Sales Solutions UG (haftungsbeschränkt).