Legal notice and privacy

Legal notice

Information required under Section 5 of the German Digital Services Act (DDG).

Email: bossert.dev@gmail.com

Responsible for the content under Section 18 (2) of the German State Media Treaty (MStV): Lukas Bossert, address as above.

Agent Playground is a private, non-commercial demonstration project.

Rules for using the playground

You describe a small web app, software builds it automatically, and the result is published on a public page. By sending a request you agree to the following.

• Do not put personal data, confidential information or passwords into a request. The text is processed by third parties and shapes a page that anyone can open.
• Do not request apps that imitate other companies or people, collect data from their users, or contain unlawful, hateful or sexual content.
• Do not try to overload or circumvent the service's limits.
• Generated apps come without any warranty. They are demos, may contain mistakes and may be removed at any time without notice.

Generated apps and how to report one

The apps are written by an AI model from visitors' requests and published at lukasb3.github.io/agent-playground-apps without prior review by a person. Each one is checked automatically, cannot contact other servers, and carries a badge marking it as AI-generated. They do not reflect my views.

If an app infringes your rights or is unlawful, email me its address at bossert.dev@gmail.com. I remove such apps without delay once I learn of them.

Liability

As a service provider I am responsible for my own content on these pages under general law (Section 7 (1) DDG). Under Sections 8 to 10 DDG I am not obliged to monitor transmitted or stored third-party information or to look for circumstances that indicate unlawful activity. Obligations to remove or block the use of information under general law remain unaffected. Liability in this respect is only possible from the moment I become aware of a specific infringement.

This site links to external websites over whose content I have no influence. The respective provider is always responsible for the content of linked pages. If I become aware of an infringement, I will remove the link without delay.

Privacy policy

The controller under the GDPR is Lukas Bossert, reachable at the address and email above. The playground uses no cookies, no analytics and no advertising. Fonts are served from this site.

Visiting this site

The site is hosted by Vercel Inc. (USA). When you open a page, Vercel processes your IP address and technical request data such as time, address requested and browser type in order to deliver the page and keep the service secure (Art. 6 (1) (f) GDPR).

The captcha

To keep automated abuse out, the form loads Turnstile from Cloudflare, Inc. (USA). Turnstile runs a check in your browser and transmits your IP address and technical browser information to Cloudflare, which returns a result that my server verifies. This is necessary to protect the service and its budget (Art. 6 (1) (f) GDPR).

Sending a request

When you send a request, my server (rented from Hetzner Online GmbH, located in Falkenstein, Germany) receives the text and your IP address. It stores the text, the time, the progress of the job and a keyed hash of your IP address, which lets it enforce the limit per visitor without keeping the address itself. These records are deleted after 30 days. The server keeps no access log with IP addresses.

The text of your request is sent to Anthropic, PBC (USA) through its API, because its AI model writes the app. Anthropic does not receive your IP address from me.

I process this data to provide the service you asked for and to protect it against abuse (Art. 6 (1) (b) and (f) GDPR).

Published apps

The finished app is stored in a public repository and served by GitHub Pages, a service of GitHub, Inc. (USA). Anyone who has the link can open it, and its files are publicly visible. The app is derived from your request, so anything you wrote there may show up in it. When you or someone else opens an app, GitHub processes the visitor's IP address to deliver it.

Apps stay online until I remove them. You can ask me to remove an app you requested at any time by emailing me its address.

Transfers to the USA

Vercel, Cloudflare, Anthropic and GitHub are based in the USA. Transfers are covered by the EU-US Data Privacy Framework where the provider is certified under it, and otherwise by the standard contractual clauses of the European Commission.

Email

If you email me, I process your address and message in order to reply (Art. 6 (1) (b) and (f) GDPR) and delete them once they are no longer needed.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection under Arts. 15 to 21 GDPR, and the right to lodge a complaint with a supervisory authority, for example the Bayerisches Landesamt für Datenschutzaufsicht. To exercise your rights, email me at the address above. Because I store no names or addresses with a request, please include the link to your app or the time of your request so I can find it.

Last updated: 5 October 2026