Privacy Policy

Last Updated: December 2025

1. Data Controller

The data controller responsible for data processing on this website is:

Xares Innovative Solutions GmbH
Neue Strasse 11
74632 Neuenstein
Germany

Managing Director: Frederik Wystup

Contact: info@xares.com
Phone: +49 (0) 7942 942 0 363

For more information about the controller, please see our Legal Notice.

2. Purpose and Functionality of HN Gems

This website aggregates and analyzes public posts from Hacker News (news.ycombinator.com) to surface high-quality content from low-karma users. The analysis is performed automatically using Artificial Intelligence.

3. Processed Data and Data Sources

3.1 Data from Hacker News

We perform 2 automated API calls per post to collect comprehensive metadata from the Hacker News Public API:

1. Post/Story Data (/item/{id}.json):

2. Author/User Data (/user/{username}.json):

Purpose: These metrics enable quality assessment to identify valuable content from low-karma authors. We filter posts by author karma (<100), post age, and quality indicators to surface hidden gems.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in curating publicly available information)

3.2 Data from GitHub

For linked GitHub repositories, we perform 6 automated API calls per repository to collect comprehensive quality metrics:

1. Basic Repository Information:

2. Programming Languages:

3. Recent Commit Activity:

4. Contributors:

5. Repository Structure:

6. README Content:

Purpose: These comprehensive metrics enable factual quality assessment based on measurable indicators such as community engagement (stars, forks), maintenance activity (commits), collaboration (contributors), and project structure (documentation, tests, CI/CD).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing accurate quality assessments)

3.3 Legitimate Interest Assessment

Our legitimate interest is to provide a valuable curation service that surfaces high-quality content that would otherwise be overlooked. Hacker News users can reasonably expect that their public posts may be aggregated and referenced by third parties. We process only information that is already publicly available and do not add any additional personal data.

Hacker News-specific considerations: All Hacker News data we collect is publicly accessible via the official Hacker News website and API. Users who post on Hacker News have made their content publicly visible. Our processing serves the legitimate interest of helping the community discover valuable posts from new contributors that might otherwise be overlooked due to low karma scores. We do not contact users directly or use their data for purposes other than the quality analysis displayed on our website.

GitHub-specific considerations: All GitHub data we collect is publicly accessible via GitHub's web interface and API. Repository contributors have made their contributions publicly visible on GitHub. Our processing serves the legitimate interest of providing factual quality assessments to help the developer community discover valuable open-source projects. We do not contact contributors directly or use their data for purposes other than the quality analysis displayed on our website.

4. Artificial Intelligence (Google Gemini API)

4.1 Data Processing Agreement

To automatically analyze aggregated content, we use the Google Gemini API (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a data processor.

Processing is performed under a Data Processing Agreement (Cloud Data Processing Addendum) in accordance with Art. 28 GDPR.

4.2 Data Transfer to Third Countries

Data transfer to the USA is based on the EU-US Data Privacy Framework (Art. 45 GDPR). Google LLC is certified under this framework.

4.3 Use of Data by Google

When using paid Gemini API services (Paid Tier):

5. Retention Period

6. Data Sharing

No data is shared with third parties, except for the data processing by Google LLC mentioned in Section 4.

7. Cookies and Tracking

This website uses no cookies and no tracking. No user profiles are created.

8. Server Log Files

Our hosting provider automatically collects and stores technical information in server log files:

This data is not merged with other data sources and is automatically deleted after 7 days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in system security)

9. Your Rights as a Data Subject

You have the following rights:

Right to Object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.

To exercise your rights, please contact: info@xares.com

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

Competent supervisory authority:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
Phone: +49 711/615541-0
Email: poststelle@lfdi.bwl.de

11. Transparency Regarding AI-Generated Content

The analyses and summaries displayed on this website are generated using Artificial Intelligence (Google Gemini). The content is based on automated assessments and may contain inaccuracies. Each analysis is labeled as "AI Analysis."

This transparency obligation is in preparation for the EU AI Act (Regulation 2024/1689), which will apply to AI-generated content for public information purposes from August 2, 2026.

12. Source Code and Open Source

This website is based on the open-source project hn-gems, which is licensed under the MIT License. The source code can be viewed on GitHub.


Note: All data we process is already publicly available on Hacker News and GitHub. We aggregate and analyze this data solely for informational purposes while respecting the data protection rights of all data subjects.

If you have any questions about this privacy policy, please contact us at: info@xares.com