What we hold, and what we do not.

Who is responsible.

Baudenbacher Communications operates this site and is the data controller for the personal data described on this page.

Write to that address to ask what we hold about you, to have it corrected or deleted, or to object to how it is used. We answer from the same inbox.

There are no accounts.

The site has no public sign-up and no login. You do not have a profile here, because there is nothing to have one for: a listing is bought once and never edited, so there is no session to keep and no password to store.

One personal detail, for one purpose.

A submission carries a contact email address. We use it to write to you about that submission — to confirm we received it, to ask a question about it, and to tell you whether it was approved. It is not published, it does not appear in the listing, and it is not on the machine view.

Where it is kept.

An application reaches us two ways: by mail to contact@milliontokenwindow.com, or through the form on this site. Either way it is handled by Brevo, the service we use to deliver mail. The form also files what you send as a contact record there, so that we can tell one application from another, and then sends it on to us as email. A person reads it in our inbox and replies from there.

Nothing on this site writes it down. There is no submissions database and no account here, and neither front door — not the page you are reading, not the machine view — ever reads from Brevo. What you send sits in Brevo and in our inbox, and nowhere else. Write to the address above to have it deleted.

What is published is the listing itself, once your company has approved it: its name, its text, its link, its logo, its sector and its place on the globe. The contact email address is not part of it.

Crawler counts.

The site invites AI crawlers by name in its robots.txt, and we count the requests that come from those crawlers — which crawler, and which page it asked for — so that we know which of them actually arrive. Requests from people are not in that count. It is operational telemetry: it is never published, never shown to an advertiser, and never attached to a listing.

Hosting.

Both versions of the site, milliontokenwindow.com and milliontokenwindow.ai, are hosted by Hostinger, which handles the requests that reach them. Every request passes first through Cloudflare, which runs the domains’ DNS and sits in front of both sites.

Site analytics for us, and no reporting for anyone.

The human version of this site uses Cloudflare Web Analytics so that we can see how the site itself is used — which pages are visited, when, and where visitors came from. It runs on milliontokenwindow.com only; the machine version serves JSON and carries no script.

It sets no cookie, stores nothing in your browser and does not fingerprint you; it records the page, the referring page, the browser and device type and the country the request came from.

If you allow analytics cookies in the cookie notice, the site also loads Google Analytics, which shows us how visitors move through the site — which pages they read and in what order. It is not loaded at all until you click Allow all cookies, and not ever if you click Decline optional cookies. It runs with every advertising signal switched off: nothing it collects here is used for advertising or ad personalisation.

Nothing it collects is published, shown to an advertiser, or attached to a listing. There is no dashboard. We do not provide advertising-style performance reporting, audience tracking or visibility metrics to any listed company: what is sold here is a place in the artifact, and nothing else.

Separately, we may conduct and publish research into how selected AI systems represent publicly available company information. Nothing from the site analytics or the crawler counts goes into it, and it is not a report to any listed company about its listing.

Cookies.

This site sets its own cookies only after you click something, and Google Analytics sets its cookies only after you allow it. No advertising tool runs here. The machine version, milliontokenwindow.ai, sets none and runs no script at all.

• mtw-theme — set by this site when you click the light/dark switch, and never otherwise. It holds the word light or dark so the page arrives in the scheme you chose, and it lasts 365 days. It identifies nobody and is not shared.
• mtw-consent — set by this site when you answer the cookie notice, and never otherwise. It holds the word granted or denied so the notice is not asked again; a yes lasts 365 days and a no lasts 180. It identifies nobody and is not shared.
• _ga and _ga_7LE72J41Y5 — first-party analytics cookies set by Google Analytics, only after you click Allow all cookies. The first keeps a pseudonymous identifier that tells one browser’s visits apart from another’s; the second keeps track of the current session. Both last two years unless you clear them. Google keeps the data tied to them for 14 months, counted from your last visit, and then deletes it.

Change your cookie choice. Withdrawing a yes deletes the analytics cookies straight away.