Privacy Policy

In short

This website has no user accounts, no ad trackers and no tracking cookies. I only process personal data where it is technically necessary – mainly your IP address when a page is requested –, when you use a tool with your own input, or when you email me. The details follow below.

1. Hosting and server log files

The website is hosted by an external hosting provider; the server is located in the USA. With every request the server automatically processes: IP address, date and time, requested address, referrer (the page you came from), browser and operating system (user agent), HTTP status code and amount of data transferred.

This is necessary to deliver the site and to detect errors or attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is secure and stable operation. The host rotates and deletes the logs automatically; I only look at them in case of malfunctions or abuse. The transfer to the USA is based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).

2. Cloudflare

All requests pass through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers the site encrypted, caches static files and protects it against attacks and abuse. To do so, Cloudflare processes your IP address and the technical data of your request (Art. 6(1)(f) GDPR).

If a request looks suspicious, Cloudflare may show a security check and then set a strictly necessary cookie (e.g. cf_clearance), based on Section 25(2) no. 2 TDDDG. Cloudflare is certified under the EU-U.S. Data Privacy Framework, so the transfer to the USA is covered by the European Commission's adequacy decision (Art. 45 GDPR). More in Cloudflare's privacy policy.

Two more features also run through Cloudflare:

• Fonts: All fonts are hosted on this server and loaded directly from here. Your browser does not connect to Google or any other provider for them.
• Audience measurement: I use Cloudflare Web Analytics. It sets no cookies, uses no local storage, builds no user profiles and does not fingerprint. Only aggregated values are evaluated, such as page visited, referrer, browser, operating system, device type, country and load time – so I can see which content is used (Art. 6(1)(f) GDPR).

3. Cookies and storage on your device

This website sets no tracking or advertising cookies. Something is stored on your device only when you actively use a feature:

• lightMode – your chosen colour mode, 1 year
• lang – your language choice on the homepage and the About page, 1 year
• Online Notepad – your text and font size in your browser's local storage; both stay on your device and are never transmitted

This storage is strictly necessary for the feature you requested (Section 25(2) no. 2 TDDDG). You can delete it in your browser at any time.

4. Free tools

• In your browser: Text tools, calculators and generators run entirely in your browser. Your input never leaves your device.
• On the server: For SEO, domain and server tools, your input (e.g. a URL, domain or text) is sent to my server, processed in memory only to produce the result, and not stored. The server then queries the given website or public services, such as the DNS resolvers of Google and Cloudflare, domain registries' whois servers, IndexNow, ping services and – when expanding share links from the Google Maps app – Google's redirect service. They see my server's IP address, not yours.
• Name suggestions in the review tools: When you type a business name there, my server sends the typed text, the page language and the country of your connection (determined by Cloudflare) to Google's Places API and shows you the matching listings. Your IP address is not sent to Google; only the number of requests per day is stored. The suggestions are subject to the Google Maps Additional Terms of Service and the Google Privacy Policy (Art. 6(1)(f) GDPR).
• Abuse protection: To prevent the tools from being misused as a proxy or for attacks, the server stores your IP address in hashed form (for IPv6: the /64 network) together with the times of your tool requests. The entries expire after 10 minutes and are then deleted automatically (Art. 6(1)(f) GDPR).
• IP tool and VPN leak test: Both show what the server sees of your connection (IP address, reverse DNS, request headers). For the VPN leak test, Cloudflare additionally passes the network number (ASN), country and time zone of your IP address to my server; your IP address is not sent to any other service for this. The server looks up the network's name by that number in Team Cymru's public ASN directory – only the number, never your IP. Its WebRTC test runs in your browser and contacts Cloudflare's STUN server for this. That is exactly the purpose of these tests (Art. 6(1)(f) GDPR).
• Images of checked sites: Social Preview and Favicon Checker display images directly from the website you are checking. Your browser loads them from there.
• Read aloud: The Text to Speech tool uses your browser's speech synthesis. Depending on browser and voice, the browser vendor may process the text.

5. Affiliate links and sponsors

Some links are affiliate or sponsor links. If you buy something through them, I may receive a commission; your price does not change. These links usually go through my redirect domains (redirect.niklaspalladini.com, redirect.n1klas.com) at the link service Short.io (Short.cm Inc., Wilmington, Delaware, USA). Short.io logs the click – including IP address, time, browser and referring page – for click statistics and forwards you to the provider (Art. 6(1)(f) GDPR; my legitimate interest is funding the free content). The transfer to the USA is based on the European Commission's Standard Contractual Clauses or, where the provider is certified, the EU-U.S. Data Privacy Framework. More in Short.io's privacy policy.

The provider or its partner network may then set cookies to attribute the commission – under their own responsibility. This website sets no cookies for that. The logos in the tools' sponsor banner are served by my own server; your browser does not load them from third parties.

6. Contact by email

If you email me, I process your email address and the content of your message to answer your request (Art. 6(1)(b) or (f) GDPR). The emails are stored at the host (see section 1). I delete them once they are no longer needed and no statutory retention obligations apply.

7. Encryption

The website is delivered exclusively via HTTPS (TLS-encrypted).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal email to [email protected] is enough.

Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. Other

There is no automated decision-making or profiling. You are not obliged to provide data; without transmitting your IP address, however, the website cannot be delivered technically.