Privacy

Controller and contact details

Pietro Petrocchi
Maestri Comacini 29B, 6834 Morbio Inferiore, Switzerland
pietropetrocchi@protonmail.com

Purposes and grounds for processing

We provide the requested tools and process only the data needed to operate them. Where the GDPR applies, providing the requested service relies on Article 6(1)(b); abuse prevention and service continuity rely on our legitimate interest in security, Article 6(1)(f). We do not use files for model training, advertising or profiling. Requests to exercise privacy rights rely on legal obligations, Article 6(1)(c); other inquiries rely on our legitimate interest in responding, Article 6(1)(f).

Calculations in your browser

Calculators, generators and developer tools process data on the page. Expressions, passwords, tokens and results are not sent to the server or stored persistently by the application. Closing or reloading the page clears them.

Temporary files

Conversions require file uploads. The check on 23 October 2026 established that PHP-FPM uses the hosting temporary directory, separate from the private directory expected by the application. The test file had permissions 0600, accessible only to the operating-system user, and was removed at the end of the test request. The conversion server processes inputs and results in temporary memory filesystems, with isolated processes without network access. The website receives the result in a private disk directory. On normal completion, originals are deleted before transferring the result and the result is deleted after transfer. Scheduled cleanup covers application directories and the worker; handling residue in the separate hosting PHP directory after an abnormal shutdown is not yet verified. We do not maintain a document archive or send files to external converters.

Abuse prevention

The server receives technical data needed for the connection, including the IP address. To limit requests, the cache holds a key derived from the IP using a server secret, expiring within 10 minutes. This key is not added to statistics. Counters never contain names, contents, passwords or results.

Logs and retention

Application logs have daily rotation and date-based deletion with a configured retention of 14 days; they are not intended to contain files or entered values. Hosting and proxy logs may contain IP addresses, URLs, dates, browser information and technical paths. Infomaniak documents at least 7 days without specifying a maximum in that guide. On 23 October 2026, hosting access archives dated from 21 September and error/PHP-FPM logs from 16 October were present: these are observations, not guaranteed limits. Verified maximum for hosting and proxy logs, in days: not confirmed. On the second server, Nginx logs use 14 daily rotations; without new writes this does not mean deletion after 14 days. System and authentication logs have a separate policy whose maximum retention is not yet confirmed. Hosting dashboard statistics are separate from internal counters and Matomo.

Recipients and location

Website hosting checked in the Infomaniak Manager on 23 October 2026: Infomaniak, managed cloud server in Satigny, Switzerland. This does not yet verify the complete conversion and analytics infrastructure. Infomaniak Network SA provides the infrastructure; its public DPA states that it forms an integral part of the contractual terms. Applicable agreements and any subprocessors across the entire service still require verification. Authorities may receive data where required by law. Switzerland benefits from an EU adequacy decision; this does not automatically cover onward transfers to other countries or other providers, including analytics and email. Conversions run on a separate Infomaniak server in Switzerland, as confirmed by the controller on 23 October 2026; its specific datacenter has not been verified. The website sends files to the processing server over an encrypted, authenticated SSH connection.

Hosting backups

On 23 October 2026, the Manager showed 7 daily hosting copies dated 17 to 23 October. No restoration was performed. Infomaniak states that backups are held in another Swiss datacenter. No exclusion for conversion directories or PHP temporary files was found in the panel inspected; their actual exclusion from backups and snapshots still requires provider confirmation. Worker inputs and processing use temporary memory filesystems; on the website, PHP temporary files and results pass through disk storage. A file present during a backup could therefore remain in a copy after working-file deletion. Deleting a file does not guarantee immediate deletion of every copy. Patchman is enabled on the hosting: Infomaniak terms provide for quarantine of files detected as malicious, with automatic deletion after six months. Whether it also captures conversion uploads remains to be confirmed. We have not disabled these protections.

Email contact

If you write to the published contact, we process your email address and message to respond and handle your request. The email service used is Proton AG, Switzerland, with servers reported in Switzerland, Germany or Norway. Safeguards for any transfers and subprocessors must be checked for the actual configuration. Correspondence is retained as needed to respond and address any disputes, according to the periods applicable to protecting legal rights. Do not send confidential documents unless necessary.

Your rights

You may contact the controller for access, correction, deletion and, where applicable, restriction, portability and objection. You may withdraw consent for processing based on consent. You may contact the FDPIC or the competent EU supervisory authority and use remedies provided by law. Aggregate counters cannot reconstruct your operations; we do not collect additional data to identify you within them.

Providing data and automated decisions

Registration is not required. Conversions require the relevant files; without them we cannot perform the conversion. Automated processing produces the requested result without decisions having legal or similarly significant effects on a person. Advertising, accounts and profiling are not active.

Aggregate statistics

Using a tool updates a MySQL counter containing only the UTC day, tool identifier, outcome and operation count. We do not store individual events, personal identifiers, IP addresses, file names, inputs or results. Browser tools send only the tool and outcome; for files we count the result prepared by the server or a processing failure, without tracking downloads. These are not unique visitor counts. Counters help improve the catalog, use a 365-day retention window with daily cleanup, and are not shared for advertising.

Cookieless Matomo (production)

In production we measure page views with Matomo, operated by the controller at analytics.pietropetrocchi.it (site 9), separately from tool counters. Tracking cookies and browser feature detection are disabled. We send only the canonical page URL and title, without query strings, fragments or referrers; form, click, download, heatmap and session recording tracking are not enabled. Matomo still receives connection data, including IP address and user agent, and may process technical identifiers: cookieless does not mean anonymous. We respect Do Not Track and Global Privacy Control by not loading the tracker when enabled. Retention in days: not confirmed. Analytics hosting country: Switzerland. Privacy settings, identifiers, retention and the applicable conditions for consent exemption must be checked on the Matomo instance.

Matomo: Cookie notice