We attach great importance to the protection of your data. In order to inform you about the collection and processing of personal data, we ask you to take note of the following privacy policy.
Scope
This privacy policy informs you about the nature, scope, and purpose of the processing of personal data on this website, as well as your rights as a data subject (pursuant to Art. 13 GDPR).
Controller
The entity responsible for data processing is the party named below. Further contact details can be found in our Legal Notice.
René Robineau
+43 (0) 660 / 1579057
rene@devholster.com
Laaer-Berg-Straße 47B/172, A-1100 Vienna
Personal data
We process personal data that you transmit to us via this website or that is generated during use for specific purposes and limited to the extent necessary (pursuant to Art. 5 para. 1 lit. b and lit. c GDPR).
Depending on the purpose, processing is carried out on the basis of your consent (pursuant to Art. 6 para. 1 lit. a GDPR), for the performance of contractual measures (pursuant to Art. 6 para. 1 lit. b GDPR), or on the basis of our legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR). Data is only passed on if this is necessary to fulfill the stated purposes and is legally permissible.
Rights of the data subject
You have the following rights regarding the personal data concerning you:
Right of access (pursuant to Art. 15 GDPR)
Right to rectification or completion (pursuant to Art. 16 GDPR)
Right to erasure (pursuant to Art. 17 GDPR)
Right to restriction of processing (pursuant to Art. 18 GDPR)
Right to data portability (pursuant to Art. 20 GDPR)
Right to object to processing (pursuant to Art. 21 GDPR)
To exercise these rights, please contact the controller named above.
Right of withdrawal
You have the right to withdraw consent once given at any time with effect for the future (pursuant to Art. 7 para. 3 GDPR). This withdrawal can be made by e-mail. Please also contact the controller named above for this purpose.
Right to lodge a complaint
If you believe that the processing of your personal data violates the General Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority (pursuant to Art. 77 para. 1 GDPR). The responsible authority in Austria is the Austrian Data Protection Authority:
+43 (0) 1 521 520
dsb@dsb.gv.at
Barichgasse 40-42, 1030 Vienna
www.dsb.gv.at
SSL or TLS encryption
For security reasons and to protect confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" in the address line of the browser and by the padlock symbol. By activating this encryption, the data you transmit to us cannot be read by third parties.
Furthermore, we use appropriate technical security measures to protect your data against access or manipulation by unauthorized persons in accordance with the principles of integrity and confidentiality (Art. 5 para. 1 lit. f GDPR).
Cookies and local storage
We use exclusively cookies and comparable storage technologies that are technically necessary for the website to function securely and flawlessly. No identification of your person takes place. This processing is based on our legitimate interest in providing a technically flawless website (pursuant to Art. 6 para. 1 lit. f GDPR).
This includes the local storage of your display preferences, such as the light or dark colour scheme you select. These entries remain exclusively in your browser, are not transmitted to us and can be deleted by you at any time in your browser settings.
Our tools
On this website we provide free online tools. They can be used without registration. Processing takes place locally in your browser: the text, code or files you enter are not transmitted to our server and are therefore not stored by us either. A few tools need something from a third party to work at all, and each of them tells you so on its page before the first request is made. Those cases are listed in the following sections.
Machine learning models from Hugging Face
The tools for speech to text, subtitles, text to speech with the Kokoro voice, background removal and semantic similarity run a machine learning model inside your browser. The model files are not part of our website. They are fetched from huggingface.co, a service of Hugging Face, Inc., 20 Jay Street, Brooklyn, NY 11201, USA, and only after you press the download button on the respective page. Hugging Face then receives the technical data of that request: your IP address, the browser type and version, and the name of the requested file. Your audio, text or images are never sent there.
Once downloaded, the model is stored in your browser's cache storage and loaded from there on later visits, so the request is normally made once per browser. You can remove the stored files at any time with the "forget model" button on the page or through your browser settings.
The legal basis is your consent, given by pressing the download button (pursuant to Art. 6 para. 1 lit. a GDPR). Hugging Face processes the request in the USA. This transfer to a third country takes place on the basis of your explicit consent (pursuant to Art. 49 para. 1 lit. a GDPR). Further information can be found in Hugging Face's privacy policy.
System voices in the text to speech tool
The text to speech tool reads text with the voices installed on your device through your browser's speech synthesis interface. Some browsers also list voices that are synthesised on a server of the browser or operating system vendor, for example Google or Microsoft. If you choose such a voice, the text you entered is sent to that vendor by your browser, not by us. The tool marks these voices with the word "network" in the voice list, and the voices without that mark run entirely on your device. Which vendor is involved and how it processes the text depends on your browser and operating system and is governed by their privacy policies. The Kokoro voice offered on the same page runs inside your browser and sends the text nowhere.
Peer-to-peer chat
The peer-to-peer chat connects two browsers directly with each other using WebRTC. Messages travel encrypted from one browser to the other and pass through no server of ours or anyone else's. We never see a message, an ID or who talks to whom. Nothing is stored anywhere; closing the tab ends the conversation.
Setting up such a connection needs two kinds of help from third parties. First, your browser asks a STUN server for its own public address. We use stun.cloudflare.com, operated by Cloudflare, Inc., San Francisco, USA. This server receives your IP address and port and nothing else, and browsers built on Chromium and Safari repeat that request roughly every ten seconds while the chat is open. Second, the connection offer is exchanged through public Nostr relays. The library we use selects five relays from a built-in list; the relays are run by third parties, some of them outside the European Union, and receive your IP address, a random key generated for this page view and the encrypted offer. They cannot read the offer or any message. Finally, your chat partner learns your public IP address, because a direct connection requires it.
None of this happens when you open the page. The chat starts only after you have read the notice at the top of the tool and pressed "I understand, start", and no request is made before a valid partner ID is entered. The legal basis is your consent (pursuant to Art. 6 para. 1 lit. a GDPR), which also covers the transfer to Cloudflare and to relays outside the European Union (pursuant to Art. 49 para. 1 lit. a GDPR). You withdraw it by leaving the chat or closing the tab; the connections are closed at that moment.
Feedback on tool pages
Every tool page has a small feedback element with the buttons "like", "dislike" and "report a problem" and an optional text field. If you use it, your vote, the address of the page and the text you typed are sent to our message server at messaging.webgaudi.at, operated by the controller named above and hosted in the European Union, and forwarded to us as a notification. No account, name or e-mail address is attached to it, and your IP address is not stored with the message. Please do not enter personal data in the text field. The legal basis is our legitimate interest in improving the tools (pursuant to Art. 6 para. 1 lit. f GDPR); the element does nothing until you press one of its buttons.
Links to third-party websites
Our site contains hyperlinks to websites of other providers. If you follow such a link, you leave our website and the privacy policies of the respective target site apply. It is possible that the operator of the target website collects and processes personal data. We have no influence over this and are not responsible for such data processing. Please therefore inform yourself directly on the linked website about how your data is handled.
Hosting
We use the hosting provider Vercel (Vercel Inc) to provide this site online. When you access our website, technically necessary data is processed to ensure the secure and stable operation of the site. This includes, in particular, the IP address, time of access, requested resources, the website from which the access is made, and technical information of the browser. This data is temporarily stored in so-called server log files and serves exclusively for technical provision, troubleshooting, and to ensure system security (pursuant to Art. 6 para. 1 lit. f GDPR).
The stored log data is deleted promptly (at the latest after 24 hours) as soon as it is no longer required for the stated purposes. Evaluation for other purposes does not take place.
For the processing of data in third countries (outside the European Union), Vercel uses Standard Contractual Clauses (pursuant to Art. 46 para. 2 lit. c GDPR). These ensure that European data protection standards are maintained when your data is processed or stored in third countries. In addition, Vercel is certified under the EU-U.S. Data Privacy Framework (DPF).
Further information can be found in Vercel's privacy policy.
Vercel Analytics
On our website, we use the Vercel Analytics service to continuously improve our offer and to determine technical performance indicators. The legal basis is our legitimate interest (Art. 6 para. 1 lit. f GDPR) in analyzing and improving the website, as no personal data is processed.
Only anonymized technical data such as page views, interactions, browser and device type, and the approximate geographical region (country) are recorded without evaluating or storing personal information or using cookies. The data is not used to identify individuals and is intended only for aggregated, statistical evaluations.
Further details can be found in Vercel's privacy policy.
Contact
If you wish to contact us, you may do so via the email address provided. In this case, the email address as well as the data transmitted with the email will be stored.
The processing and storage of this data is for the purpose of carrying out pre-contractual measures or for contract fulfillment (pursuant to Art. 6 para. 1 lit. b GDPR). This personal data will only be used to answer your inquiry or to contact you and will then be deleted, unless there is a legal reason for a longer retention period. We do not pass this data on to third parties without your consent.
Please note not to transmit any sensitive data when contacting us. The contact details provided are intended exclusively for the purpose of initial contact. Further steps will then be discussed personally or via other communication channels.