Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website pockettoolbox.org. Personal data is any data that can be used to identify you personally.

Data Controller

2. Hosting & Content Delivery Network (Cloudflare)

This website is delivered via the global edge network of Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which acts as our content delivery network (CDN) and protects the site against DDoS attacks and abuse. Page requests are routed through Cloudflare's network, during which technical server logs (e.g. IP address, browser type, referrer, timestamp of access) may be processed briefly. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR) in a fast, stable, and secure delivery of the website.

GDPR compliance: We have a Data Processing Agreement (DPA) with Cloudflare pursuant to Art. 28 GDPR. Cloudflare is certified under the EU-U.S. Data Privacy Framework (DPF) and additionally relies on EU Standard Contractual Clauses (SCCs) as a basis for any transfers of data to the United States. On this basis, the use of Cloudflare is considered GDPR-compliant.

3. Analytics with Plausible Analytics (self-hosted)

To measure page visits anonymously and statistically, we use Plausible Analytics, run on our own server infrastructure at analytics.pockettoolbox.org. This is not the hosted cloud service operated by Plausible Analytics OÜ: your data never leaves our own infrastructure and is not shared with any third party.

Plausible does not use cookies and does not employ any form of device fingerprinting. IP addresses are only used momentarily to compute unique visitor counts (via a daily-rotating, non-reversible hashing method) and are not stored afterwards. No personal profiles are created and no individual is tracked across websites.

GDPR compliance: Because no personal data within the meaning of the GDPR is collected, no cookies are set, and no information is stored on your device, the use of Plausible is permissible on the basis of our legitimate interest in anonymous, aggregate analytics (Art. 6(1)(f) GDPR); no cookie consent banner is required for this. Since we operate Plausible ourselves, there is also no need for a Data Processing Agreement with an external analytics provider.

4. Further Data Collection on our Website

Local Storage (LocalStorage)

We do not use any third-party tracking or advertising cookies. We only use your browser's local storage (localStorage) to remember your chosen interface preferences (e.g., dark/light theme, language, bookmarked tools) locally on your device.

Local Processing in the Tools

All tools on this website run entirely inside your browser. Files, text and any other input you use in a tool are not transmitted to our servers and are not stored by us. If you install the site as an app or make tools available offline, your browser stores the required program files in its local cache (Service Worker / Cache Storage). You can clear this cache at any time in your browser settings.

Two tools need an outside connection: the DNS lookup sends the domain name you enter to Cloudflare's DNS service (cloudflare-dns.com), and text recognition (OCR) downloads its language data from cdn.jsdelivr.net on first use without sending your image. All exceptions are listed on the No upload page.

Contact Form and Cloudflare Turnstile

If you use the contact form, we send your details (type of request, message and, if provided, name, email address and tool) by email to our inbox in order to handle your request (Art. 6(1)(b) or (f) GDPR). The message is not stored in a database. The email stays in our inbox until the request is resolved and no retention obligations apply.

To protect against spam, the contact page uses Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Turnstile uses technical characteristics of your browser (e.g. IP address, browser information, interaction with the page) to check whether a request comes from a human. No advertising cookies are set. The legal basis is our legitimate interest in a spam-free form (Art. 6(1)(f) GDPR). Turnstile is only loaded on the contact page. See the Turnstile privacy policy for details.

5. Your Rights

Under the applicable statutory provisions, you have the right at any time to free-of-charge information about your stored personal data, its origin, recipients, and the purpose of processing, as well as a right to rectification, restriction, or erasure of this data. You also have a right to data portability and a right to object to processing where it is based on Art. 6(1)(f) GDPR. Please contact the address provided above at any time. You furthermore have the right to lodge a complaint with the data protection supervisory authority responsible for you.