Privacy Policy

Data Controller

For the purposes of GDPR, UK GDPR, and other applicable data protection laws, the data controller is:

Information We Collect

We collect very little. Here is what we may receive:

• Contact and feedback form submissions — name (if provided), email (if provided), and your message
• Feature suggestions — title, category, description, and email (if provided)
• Analytics data — page views, referrers, and general usage patterns, only if you consent via our cookie banner

Most tools run entirely in your browser. Files you process (PDFs, images, etc.) are not uploaded to our servers.

Legal Basis for Processing (GDPR)

• Consent (Article 6(1)(a)): For analytics cookies. You can withdraw consent at any time via the cookie banner.
• Legitimate Interest (Article 6(1)(f)): For essential site functionality, security, and processing feedback you choose to submit.

Cookies and Tracking

Analytics cookies are only loaded after you give explicit consent via our cookie banner.

Third-Party Services

• Google Analytics 4 — For website usage analytics, loaded only with your consent

We do not use any other third-party tracking, advertising, or data-sharing services.

Data Retention

• •Analytics data: 26 months (Google Analytics default)
• •Contact messages: Up to 2 years after resolution
• •Feature suggestions: Retained while the suggestion is active on the platform

International Data Transfers

Some third-party service providers may transfer data outside the UK and European Economic Area:

• Google LLC (USA) — Protected by Standard Contractual Clauses and the EU-US Data Privacy Framework

We ensure appropriate safeguards are in place for any international transfers in accordance with GDPR Article 46.

Data Sharing

We do not sell your personal information. Ever. We may share information only to comply with legal obligations such as court orders or law enforcement requests.

Data Security

We implement reasonable security measures including HTTPS encryption, secure infrastructure, and access controls to protect any information transmitted to us (such as contact form submissions and feedback). However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your Rights Under GDPR & UK GDPR

Under the General Data Protection Regulation and UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (e.g. via cookie settings)

To exercise any of these rights, please use our contact form. We will respond within 30 days.

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. In the UK, this is:

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: Request information about the personal data we collect and how it is used
• Right to Delete: Request deletion of your personal data
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the "Last updated" date revised accordingly. We encourage you to review this page periodically.

Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please use our contact form.