Tool inputs are processed to compute your result and are not stored, except where a tool says so (e.g. DataFresh monitors you create, HeaderLens hostnames).
Uploaded files are processed in memory and discarded.
Your IP address is used in memory for rate limiting only.
No tracking cookies and no third-party trackers. If you pick a language manually, a single preference cookie (uw_lang) stores that choice; choose "Automatic" to delete it.
Feedback form
If you use the feedback form, we store the feedback type, the selected tool and page, your message, the page language and host, and — only if you enter them — your name and email address. Purpose: answering your question or idea and improving or correcting our tools (legal basis: your request / our legitimate interest in running useful tools). The submission is forwarded by email to the operator's mailbox; your email address is used only to reply. Your IP address is not stored (it is used briefly in memory, as a salted hash, to limit abuse). Feedback entries are deleted automatically after 365 days; ask us any time to delete them earlier.
Consent management (CMP / IAB TCF)
Visitors from the EEA, the UK and Switzerland are asked for consent through Google Privacy & Messaging, a Google-certified consent management platform (CMP) that implements the IAB Europe Transparency & Consent Framework (TCF). You can accept all, reject all non-essential processing, or manage individual purposes and vendors. Until you decide, no advertising or analytics scripts are loaded.
If the Google message is not available (for example because it is blocked by your browser or not shown in your region), this site shows its own consent banner with the same choices: “Accept all”, “Reject non-essential” and “Manage options” (strictly necessary, statistics with Google Analytics 4, advertising with Google AdSense). The banner stays visible until you decide. Visitors from the EEA, the UK and Switzerland are shown Google ads only after consenting through the certified CMP; a choice made in the site's own banner enables advertising only where the CMP reports that these consent rules do not apply.
Consent storage
A choice made in the Google message is stored by the CMP in your browser. After any decision (in the Google message or in the site's own banner), this site sets one first-party cookie, uw_consent (HttpOnly, signed, 180 days), which contains a random pseudonymous ID, whether ads and analytics are allowed (and, for the site banner, your category choices), the policy/banner version and the time of the decision. It contains no email address, IP address or advertising ID and is used only to avoid rendering advertising elements you refused. When we change this policy or the consent banner (currently policy version 1, banner version 1) you are asked again.
Consent records (audit log)
To be able to demonstrate consent, each decision (grant, reject, update, withdrawal, re-consent) is recorded with the pseudonymous ID, time, policy/banner version, CMP identifiers, the purposes and the Google vendor choice, the Google Consent Mode state and the page where it happened. The TC string is stored encrypted; no IP addresses are stored. Records are kept for 1095 days and then deleted. Only the site owner can access or export them.
Withdrawing or changing your consent
You can change or withdraw your consent at any time with the “Privacy / cookie settings” link in the footer of every page, which reopens the consent dialog. Withdrawal applies to future processing; scripts that are already loaded are stopped by reloading the page, which happens automatically.