Privacy policy

Who controls your data

The controller of your personal data is Matěj Wernisch, registered office Sokolská 1883/8, Prague 2, Czech Republic, company ID 29519641, registered in the Czech trade register. You have the right to access, correct, delete and port your data, and the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or with the supervisory authority in your country of residence.

Files and text you put into the tools

Most tools work entirely in your browser: the file is never uploaded and we never learn what is in it. That holds for the calculators, QR codes, text work and most PDF and image editing.

With the tools that have to compute on the server (PDF compression, conversion to Word, background removal, the AI tools), we process the file or text and delete it immediately. We do not store it, do not back it up and do not use it to train models. On every such tool this is stated next to the button.

The tools that use a language model send the entered text through our server to the API of Anthropic (USA, under standard contractual clauses). Anthropic does not use the text to train its models. This is also stated next to the button of every such tool.

Operational record of tool usage

So we know which tools are worth developing, we keep one row per use of a tool: which tool it was, when, which of our two sites it came from, how long you had it open and a two-letter country code. We do not store IP addresses and the row cannot be traced back to you; it feeds totals such as “how many people used the video editor this week”.

For signed-in people the row is tied to the account, because daily limits are counted from it. Deleting the account deletes these records too.

Account

When you create an account we keep your name, email, chosen plan, favourite tools, saved presets and records of using tools that have a daily limit. All of it is in your account overview, and from there the account and all its data can be deleted for good at any time.

If you sign in with Google, all we receive from it is your name, email and profile picture address; no password is ever created with us in that case. Google learns that you are signing in to us and follows its own privacy policy.

Payments

Subscriptions are handled by Stripe. Card numbers never reach us; we only know that a payment went through and the details needed to issue a document. Tax documents have to be kept for 10 years by law, including after an account is deleted.

Analytics without a cookie banner

We measure traffic with our own Umami running on our server. It stores no cookies or other data on your device, builds no profiles and does not follow you across sites. All it takes from a visit is an anonymous summary: the page address, where you came from, the device type and the country. No individual can be identified from that.

There are no third-party advertising or tracking scripts here. The measurement data never leaves our server and we pass it to nobody.

The one exception is the contact form: it is protected from bots by Cloudflare's Turnstile, which loads only on the contact page and processes the IP address and technical browser data when the form is submitted (USA, standard contractual clauses). It only tells a person from a bot, does not track you and is used for nothing else.

Consent under the ePrivacy rules is required for storing or reading data on a user's device. Apart from the cookies listed below, without which the site would not work, nothing of the sort happens, and since the analytics process no personal data, no GDPR processing arises either. A consent banner would therefore be nothing but an extra click, so we do not have one.

The cookies we really use

• The sign-in cookie: only for signed-in users, it holds the session.
• A signed cookie with a random identifier: it counts daily limits for people without an account. It contains no personal data and nothing can be traced back from it.

Neither of them tracks or identifies anyone; both only do what you asked for yourself, so no consent is required.

Details for businesses

The exact list of tools that compute on the server is on where your data is processed. If you process your clients' data through the tools, the data processing agreement with its list of sub-processors belongs with it. The technical measures are described on Security.

Contact

For anything about your data, write to hello@anyutil.io. We respond to requests for deletion, export or correction within 30 days.