Privacy Policy

Last updated 21 August 2026

This policy explains what happens to information when you use eliroo.com. It is written to be read, not to be survived. If anything here is unclear, ask.

Who is responsible

The controller of any personal data processed through this site is KumaPix, a sole trader established in Finland. Contact: contact@eliroo.com. Because we are established in the EU, the General Data Protection Regulation (GDPR) applies to this site.

The short version

The tools themselves do not collect anything. Whatever you type, paste or open in a tool is processed by JavaScript running inside your own browser and is never transmitted to us. We cannot see it, we do not store it, and it is gone when you close the tab.

What we do collect is limited to aggregate visit statistics, and — once advertising is introduced — whatever advertising cookies you have consented to.

What we process

1. Tool input — not processed by us

Text, numbers and files you use with a tool stay on your device. There is no upload, no server-side processing and no log of tool content. This is a technical property of how the site is built, verifiable by watching your browser's network activity while you use a tool.

2. Analytics

We use Cloudflare Web Analytics to understand which pages are visited and roughly where visitors come from. It is cookieless and does not fingerprint your device or build a profile. It records the page URL, referrer, general country, browser and device type, and a page-load timing measurement. IP addresses are used transiently by Cloudflare to serve and count the request and are not made available to us.

Legal basis: our legitimate interest (Article 6(1)(f)) in understanding whether the site works and which tools people need. Because the measurement is cookieless and non-identifying, it does not require consent under the ePrivacy Directive.

3. Server logs

Our host, Cloudflare, processes standard request data — including IP address — for the purpose of delivering the site, blocking abuse and protecting against attack. This is inherent to serving any website. Legal basis: legitimate interest in operating and securing the service.

4. Email

If you write to us, we hold your message and address for as long as needed to deal with it and to keep a record of the correspondence. Legal basis: legitimate interest in responding to enquiries, or performance of a request you have made.

5. Advertising — not yet active

This site does not currently show ads and does not currently set advertising cookies. When advertising is introduced, it will be through Google AdSense, and this section will apply:

• A consent banner will appear before any advertising or analytics cookie is set, using a Google-certified consent management platform with Consent Mode v2.
• Google and its partners may use cookies and similar technologies to serve and measure ads. With consent, this may include personalised advertising based on your prior activity.
• If you decline, non-personalised ads may still be shown; these use limited data for frequency capping, aggregate reporting and fraud prevention.
• You can withdraw or change consent at any time via the Cookie settings link in the footer, which reopens the banner.
• Google's own explanation of how it uses data from sites that use its services is published at policies.google.com/technologies/partner-sites.
• Legal basis: your consent (Article 6(1)(a)).

We will also introduce Google Analytics 4 at that point, loaded only after consent and subject to the same controls.

Cookies

At present this site sets no cookies of its own and no advertising cookies. Cloudflare may set a strictly necessary cookie for security purposes. See the cookie pagefor the current detail.

International transfers

Cloudflare and Google are US-headquartered and may process data outside the European Economic Area. Such transfers rely on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses.

How long we keep things

• Tool input: never held.
• Analytics: aggregate figures retained by Cloudflare for a rolling period, currently six months.
• Email: kept while the matter is open and for up to two years afterwards.

Your rights

Under the GDPR you may request access to your personal data, correction of it, erasure of it, restriction of or objection to processing, and portability of it. You may withdraw consent at any time without affecting processing carried out before withdrawal.

To exercise any of these, email contact@eliroo.com. In practice the only personal data we are likely to hold about you is correspondence, since the analytics are not linked to an identity.

If you believe we have handled your data improperly you may complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the supervisory authority in your own EU country.

Children

This site is not directed at children and we do not knowingly collect data from them.

Changes

When this policy changes materially — in particular when advertising goes live — the date at the top will be updated and the change will be visible here before the new processing begins.