Privacy Policy

This policy explains what happens to information when you use eliroo.com. It is written to be read, not to be survived. If anything here is unclear, ask.

Who is responsible

The controller of any personal data processed through this site is Elipix(elipix.fi), established in Finland. Contact: contact@eliroo.com. Because we are established in the EU, the General Data Protection Regulation (GDPR) applies to this site.

The short version

The tools themselves do not collect anything. Whatever you type, paste or open in a tool is processed by JavaScript running inside your own browser and is never transmitted to us. We cannot see it, we do not store it, and it is gone when you close the tab.

What we do collect is limited to aggregate visit statistics, and, once advertising is introduced, whatever advertising cookies you have consented to.

What we process

1. Tool input, not processed by us

Text, numbers and files you use with a tool stay on your device. There is no upload, no server-side processing and no log of tool content. This is a technical property of how the site is built, verifiable by watching your browser's network activity while you use a tool.

2. A count of how often each tool is used (no consent needed)

When a tool shows you an answer, and again if you download a result, the site sends two words to our own server: the tool's name, such as image-cropper, and eitherused or saved. Nothing else is sent. There is no identifier, no cookie, no session, no referrer and nothing at all about your file, its name, its size or its contents.

What is stored is a running total per tool per day, for example "image-cropper, 24 August, used 41 times". It is a counter, not a record of visits: there is no row that corresponds to you, so there is nothing that could later be connected to you. We use it to see which tools are worth improving and which nobody needs.

This does not affect the promise above. Your text and your files still never leave your device. The counter knows that a cropper was used; it does not and cannot know what was cropped.

Legal basis: our legitimate interest (Article 6(1)(f)) in knowing which tools are used. Because no personal data is collected, there is nothing to consent to and nothing to withdraw. If you would rather not send it, blockingadmin.eliroo.com in your browser or an extension stops it, and every tool continues to work exactly as before.

3. Analytics. Cloudflare (no consent needed)

Because this site is served through Cloudflare, Cloudflare counts requests at its edge. This is cookieless, does not fingerprint your device and does not build a profile. It records the page URL, referrer, general country, browser and device type. IP addresses are used transiently to serve and count the request and are not made available to us.

Legal basis: our legitimate interest (Article 6(1)(f)) in understanding whether the site works and which tools people need. Because the measurement is cookieless and non-identifying, it does not require consent under the ePrivacy Directive.

4. Google Analytics 4, only with your consent

We use Google Analytics 4 (measurement ID G-9YH4N9D5P5) to see which tools people find useful. It is switched off until you accept it. On your first visit a banner asks; nothing analytics-related is stored on your device before you choose, and declining is exactly as easy as accepting.

• If you accept: Google sets _ga cookies containing a random identifier, used to recognise a returning browser and to count sessions. We enable IP anonymisation. We record page views and a single custom event, tool_used, which says which tool was interacted with, never what you typed into it.
• If you decline: no analytics cookie is set. Google Consent Mode may still receive an anonymous, cookieless signal that a page was viewed, which cannot identify you or be linked across visits.
• Never sent, either way: anything you type, paste or open in a tool. That is processed on your device and does not exist outside your browser.
• Advertising signals (ad_storage, ad_user_data,ad_personalization) are set to denied at all times, because there is no advertising on this site yet.

Legal basis: your consent (Article 6(1)(a)). Change or withdraw it at any time with Cookie settings in the footer.

5. Server logs

Our host, Cloudflare, processes standard request data (including IP address) for the purpose of delivering the site, blocking abuse and protecting against attack. This is inherent to serving any website. Legal basis: legitimate interest in operating and securing the service.

6. Email

If you write to us, we hold your message and address for as long as needed to deal with it and to keep a record of the correspondence. Legal basis: legitimate interest in responding to enquiries, or performance of a request you have made.

7. Advertising, not yet active

This site does not currently show ads and does not currently set advertising cookies. When advertising is introduced, it will be through Google AdSense, and this section will apply:

• A consent banner will appear before any advertising or analytics cookie is set, using a Google-certified consent management platform with Consent Mode v2.
• Google and its partners may use cookies and similar technologies to serve and measure ads. With consent, this may include personalised advertising based on your prior activity.
• If you decline, non-personalised ads may still be shown; these use limited data for frequency capping, aggregate reporting and fraud prevention.
• You can withdraw or change consent at any time via the Cookie settings link in the footer, which reopens the banner.
• Google's own explanation of how it uses data from sites that use its services is published at policies.google.com/technologies/partner-sites.
• Legal basis: your consent (Article 6(1)(a)).

Google Analytics is already covered in section 3 above and is subject to the same consent banner.

Cookies

This site sets no cookies of its own and no advertising cookies. Google Analytics cookies are set only if you accept them. Cloudflare may set a strictly necessary cookie for security purposes. See the cookie page for the detail.

International transfers

Cloudflare and Google are US-headquartered and may process data outside the European Economic Area. Such transfers rely on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses.

How long we keep things

• Tool input: never held.
• Cloudflare analytics: aggregate figures retained for a rolling period, currently six months.
• Google Analytics: retained for 14 months where consent was given.
• Email: kept while the matter is open and for up to two years afterwards.

Your rights

Under the GDPR you may request access to your personal data, correction of it, erasure of it, restriction of or objection to processing, and portability of it. You may withdraw consent at any time without affecting processing carried out before withdrawal.

To exercise any of these, email contact@eliroo.com. In practice the only personal data we are likely to hold about you is correspondence, since the analytics are not linked to an identity.

If you believe we have handled your data improperly you may complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the supervisory authority in your own EU country.

Children

This site is not directed at children and we do not knowingly collect data from them.

Changes

When this policy changes materially (in particular when advertising goes live) the date at the top will be updated and the change will be visible here before the new processing begins.