Legal

Privacy Policy

Last updated: April 2026 · Imprint

The short version

All tool calculations and conversions run entirely in your browser — no file uploads, no server-side processing.
We use no tracking cookies and no cross-site tracking.
Cloudflare Web Analytics is privacy-first, cookie-free, and creates no user profiles.
Microsoft Clarity and Google AdSense are activated only after your explicit consent.

1. Controller

The controller for data processing on this website is the private individual operating kittokit as a non-commercial hobby project.

Project: kittokit — non-commercial hobby project, no advertising revenue
Location: Germany
Contact: [email protected]

kittokit is a non-commercial hobby project with no profit-making intention. For data protection enquiries please use email.

2. Hosting and Infrastructure

2.1 Cloudflare Pages

This website is hosted on Cloudflare Pages. When you visit a page, Cloudflare processes technically necessary connection data as a data processor on our behalf.

Data processed

IP address (potentially anonymised), requested URL, HTTP method, referrer, browser type, timestamp

Purpose

Website delivery, security, abuse prevention

Legal basis

Art. 6(1)(f) GDPR — legitimate interest in operating a publicly accessible website

Retention

Server logs for up to 7 days, then deleted automatically

Recipient / third country

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA — transfers to the USA are covered by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and the Cloudflare Data Processing Addendum

3. Analytics

3.1 Cloudflare Web Analytics

We use Cloudflare Web Analytics — a privacy-friendly measurement system that sets no cookies and performs no cross-site tracking. No personal profiles are created.

Data processed

Pseudonymised page views, referrer, approximate geolocation (country), browser type, screen size — no individual user profile

Legal basis

Art. 6(1)(f) GDPR — legitimate interest in aggregated usage analysis to improve the website without profiling

Retention

Aggregated data for up to 90 days

Recipient / third country

Cloudflare, Inc., USA — EU Standard Contractual Clauses (see 2.1)

Opt-out

Because no personal profiles are created and no cookie is set, a formal opt-out is not required. The measurement respects the Do-Not-Track header sent by your browser.

3.2 Microsoft Clarity (planned)

We plan to use Microsoft Clarity to analyse user interactions (heatmaps and session recordings). This service will be activated only after your explicit consent via our cookie consent banner.

Data processed

Mouse clicks, scroll behaviour, page navigation, session recordings

Legal basis

Art. 6(1)(a) GDPR — consent

Retention

13 months

Recipient / third country

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA — EU Standard Contractual Clauses

Microsoft privacy statement

privacy.microsoft.com

4. Advertising

4.1 Google AdSense (planned)

We plan to integrate Google AdSense to display advertisements. AdSense will likewise be activated only after your explicit consent.

Data processed

Browsing behaviour, interest categories, cookie IDs, IP address

Legal basis

Art. 6(1)(a) GDPR — consent

Retention

Up to 13 months

Recipient / third country

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA — EU Standard Contractual Clauses

Google privacy policy

policies.google.com/privacy

5. Browser-side Storage (localStorage)

To display the website correctly we store two settings exclusively in your browser's localStorage. This data never leaves your device and is not transmitted to any server.

Stored items

kittokit-theme (light/dark preference), kittokit-lang (language preference)

Legal basis

Art. 6(1)(f) GDPR — technically necessary for correct display; no personal profile is created

Retention

Until you clear it manually (browser settings → clear site data)

Recipient

None — client-side storage only

6. Using the Online Tools

All tools on kittokit — converters, calculators, formatters and similar utilities — process your input exclusively in your browser. Files, text, and any other input are never transmitted to our servers or any third-party server.

No data processing by us takes place in this context. The processing is performed solely by your browser on your device.

7. Contact

When you contact us by email, we process the data you provide in order to handle your enquiry.

Data processed

Name (if provided), email address, message content

Legal basis

Art. 6(1)(f) GDPR — legitimate interest in responding to user enquiries

Retention

Until the correspondence is concluded, then kept for 3 months and deleted

Email routing

Email delivery is forwarded via Cloudflare Email Routing (Cloudflare, Inc., USA — see section 2.1)

8. Cookie and Storage Overview

Name / key	Provider	Purpose	Type	Retention	Legal basis
`kittokit-theme`	Own operation	Theme preference (light/dark)	localStorage	Until manually cleared	Art. 6(1)(f)
`kittokit-lang`	Own operation	Language preference	localStorage	Until manually cleared	Art. 6(1)(f)
CF session cookie	Cloudflare	Language routing (Accept-Language)	Session cookie	Until session ends	Art. 6(1)(f)
Clarity cookies	Microsoft	Heatmaps, session replay (planned)	Cookie	13 months	Art. 6(1)(a) — consent
AdSense cookies	Google	Personalised advertising (planned)	Cookie	Up to 13 months	Art. 6(1)(a) — consent

Cookies and localStorage items requiring consent are set only after you have accepted via the consent banner. You may withdraw your consent at any time.

9. Recipients and Third-Country Transfers

We share personal data only where this is necessary to operate the website or where you have given your consent.

Cloudflare, Inc. and — following consent — Microsoft Corporation and Google LLC are based in the United States. Transfers to the USA are covered by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, the EU–U.S. Data Privacy Framework. For details, please refer to the respective providers' privacy policies.

10. Your Rights as a Data Subject

Under the GDPR you have the following rights regarding your personal data:

Access (Art. 15 GDPR)

You may request information about the personal data we hold about you.

Rectification (Art. 16 GDPR)

You may request correction of inaccurate or completion of incomplete data.

Erasure (Art. 17 GDPR)

You may request deletion of your data, provided no legal retention obligation applies.

Restriction (Art. 18 GDPR)

You may request that we restrict the processing of your data.

Portability (Art. 20 GDPR)

You may request that we provide your data in a structured, common, machine-readable format.

Objection (Art. 21 GDPR)

You may object at any time to processing based on Art. 6(1)(f) GDPR (legitimate interest).

Withdrawal of consent (Art. 7(3) GDPR)

You may withdraw any consent you have given at any time with future effect — via the consent banner or by emailing us.

To exercise your rights, please contact us by email at the address listed in the Imprint.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).

The competent supervisory authority is the data protection authority of the German federal state where the controller is domiciled:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de

A list of all German data protection authorities is available at: bfdi.bund.de

12. Changes to this Privacy Policy

We reserve the right to update this privacy policy when the legal situation or our data processing practices change. The current version is always available on this page. We will display a notice on the website for material changes.