Privacy policy

All file conversions on gottrix.app run exclusively locally in your browser (via WebAssembly). Your files are never transmitted to our servers or to any third party at any time. We have no technical access to your files or their contents. No upload takes place; processing also works offline.

The website is hosted by Hetzner Online GmbH (Germany). On access, the server processes technically necessary access data (e.g. shortened IP address, time, requested resource, browser type) in server logs. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Retention is short; a data processing agreement (DPA) with Hetzner is in place.

For anonymous usage analytics we use Google Analytics 4 (provider: Google Ireland Ltd., Ireland) with Google Consent Mode v2. On your first visit, all consent signals default to "denied": no analytics cookie is set and no cross-device identifier is created. Only when you click "Accept" in the banner is measurement with a cookie activated (legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG - your consent). If you decline or make no choice, measurement stays without a cookie and without an identifier. Only aggregated usage data is recorded (e.g. page views and a "tool used" event carrying solely the tool id) - NEVER file names, file sizes or file contents. The IP address is truncated by Google Analytics 4 and not logged. A transfer to Google LLC in the USA is possible, based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. You can withdraw your consent at any time with effect for the future (change your choice in the banner or delete the analytics cookie in your browser).

For functional preferences we store exactly one value in your browser’s local storage: your appearance choice (light/dark/system, key "gx-theme"). This value stays on your device, is never transmitted to us, and serves no tracking purpose. As it is a technically necessary, user-initiated function, no consent is required; you can delete it at any time via your browser settings.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection authority. Contact via the provider details in the imprint.

gottrix.app is operated by a provider based in Germany and is governed by the EU General Data Protection Regulation (GDPR). Because file conversion runs exclusively and locally in your browser, no personal data is collected or processed from your file contents in any country - regardless of the data protection law applicable there (e.g. UK GDPR / Data Protection Act 2018, ICO). For the technically necessary delivery of the website and the - only with your consent - anonymous usage analytics (Google Analytics 4, with a possible transfer to Google LLC in the USA based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework), you may contact the data protection authority responsible for you.

The optional feedback form is completely separate from the file-conversion area and only ever processes the text you type - never file contents. When you open the form, Cloudflare Turnstile is loaded for bot defense and your request is verified server-side with Cloudflare (Cloudflare, Inc., USA). We store your message (type, text, optionally the tool id) in a database on our own server (Hetzner, Germany) and have ourselves notified internally exactly once by email via the delivery service Resend (Resend, Inc., USA); we do not collect your IP address, an email address or your name. Additional diagnostic data (browser, operating system, screen size, timestamp) is only stored if you separately and explicitly consent to it in the form. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in abuse prevention and handling your request), and for the optional diagnostic data Art. 6(1)(a) GDPR (your separate consent). A transfer to Cloudflare and Resend in the USA is possible, based on the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Processed reports are generally deleted or anonymized within 180 days.