Privacy Policy
Last updated: June 9, 2026
In short: your files never leave your device — all processing happens entirely in your browser. We only collect anonymous usage data via Google Analytics (with your consent) and data you voluntarily submit through the contact form.
1. Data Controller
The data controller for kindatool.com is Dadaanda, based in Italy. For any privacy-related request, contact us at support@kindatool.com. We have not appointed a Data Protection Officer (DPO) as we do not engage in large-scale or systematic processing of personal data.
2. File processing — your files never leave your device
All tools on kindatool.com (PDF, image, conversion, compression) run entirely inside your browser using JavaScript and WebAssembly. Your files are never uploaded to any server. Once you close or navigate away from a tool page, all data in browser memory is automatically discarded. We have no access to the content of your files, and neither does anyone else.
3. Data we collect and legal basis
Google Analytics — With your consent, we use Google Analytics to understand how visitors use the site (pages visited, browser type, approximate region, time on page). This data is anonymous and aggregated; it does not include the content of your files or any personally identifiable information. Legal basis: consent (Art. 6(1)(a) GDPR). Data is processed by Google LLC (USA) under Standard Contractual Clauses. Retention: up to 14 months (GA4 standard). You can withdraw consent at any time via the cookie banner or using the Google Analytics Opt-out Add-on.
Cloudflare — Our site is served and protected by Cloudflare, Inc. (USA), which processes network-level data (IP address, request metadata) for security, DDoS protection, and content delivery. Cloudflare never accesses the content of your files. Log retention is governed by Cloudflare's Privacy Policy. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — ensuring site security and availability. Data is transferred under Standard Contractual Clauses.
Contact form — If you submit the contact form, we collect your name, email address, and message solely to respond to your inquiry. Form submissions are routed through a Cloudflare Workers endpoint (Cloudflare, Inc., USA) before being delivered to our inbox — no data is stored on Cloudflare's servers beyond the duration of the request. We retain your message for up to 12 months, after which it is deleted. Your data is not shared with any other third party. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — responding to user enquiries.
4. Cookies
For full details on the cookies we use, see our Cookie Policy. In summary:
| Cookie / Storage | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Anonymous usage statistics (requires consent) | 2 years |
| __cf_bm, cf_clearance | Cloudflare | Security and bot protection (strictly necessary) | Session / 1 year |
| kt_cookie_consent (sessionStorage) | kindatool.com | Stores your cookie preference (accept/reject) for the current session only. Cleared automatically when the browser closes. | Session only |
We do not use advertising or profiling cookies.
5. International data transfers
Google Analytics and Cloudflare are based in the United States. Data transfers to the USA are covered by Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46 GDPR, providing appropriate safeguards for your personal data.
6. Your rights (GDPR)
Under the GDPR, if you are located in the European Economic Area, you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (applies only to contact form submissions; analytics data is anonymous and cannot be linked to any individual)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a structured, machine-readable format (applies only to processing based on consent; contact form data processed under legitimate interest is not subject to this right)
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
- No automated decisions — we do not make decisions based solely on automated processing
The only personal data we directly collect and control is the information you voluntarily submit via the contact form (name, email, message). Rights of access, rectification, erasure, and restriction therefore apply exclusively to contact form submissions. Network-level data (such as IP addresses) processed by Cloudflare is handled by Cloudflare as a data processor on our behalf — to exercise rights over such data, refer to Cloudflare's Privacy Policy.
Google Analytics data is fully anonymized and aggregated — it cannot be linked to any individual, and therefore falls outside the scope of GDPR data subject rights. Erasure or access requests relating to analytics data are not applicable. You may withdraw your analytics consent at any time via the cookie banner.
To exercise any right regarding contact form data, email support@kindatool.com. You may also lodge a complaint with the Garante per la protezione dei dati personali (Italy) or your national data protection authority.
7. Minors
kindatool.com is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us at support@kindatool.com and we will delete it promptly.
8. Changes to this policy
We may update this policy occasionally. Any material changes will be announced via a notice on the site. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.