Last updated: October 2026
This notice explains how Everytoool (“we”, “us”) processes personal data of people in the European Economic Area (EEA), the United Kingdom and Switzerland under the General Data Protection Regulation (GDPR) and the UK GDPR. It supplements our Privacy Policy.
1. Who is responsible
Everytoool, operator of everytoool.com, is the data controller for the processing described here. You can contact us at any time through our contact page.
2. Files you process with our tools
Everything you do with our tools happens on your own device. Files, text and other content you use with them are never sent to us or stored by us. We therefore do not process the contents of your files as personal data.
3. Personal data we process
| Data | Purpose | Legal basis (Art. 6 GDPR) | Retention |
|---|---|---|---|
| Visit statistics: page viewed, approximate country (derived from your IP address, which is then stored only in masked form), device type, browser, referring site | Understanding which tools are useful, improving the site, preventing abuse | Legitimate interests (Art. 6(1)(f)) | About 13 months |
| Anonymous tool usage counts (numbers and total file sizes only) | Measuring tool usage | Legitimate interests (Art. 6(1)(f)) | Until reset; contains no personal data |
| Contact form messages: name, email, message, IP address | Answering your enquiry | Legitimate interests / steps at your request (Art. 6(1)(f), 6(1)(b)) | As long as needed to handle your request; deleted on request |
| Security records: failed admin logins, rate limit counters | Protecting the website | Legitimate interests (Art. 6(1)(f)) | Short term (minutes to days) |
| Advertising cookies and identifiers set by Google | Showing and measuring ads; personalised ads if you agree | Consent (Art. 6(1)(a)) via Google’s consent message | Set by Google; see Google’s policies |
Our own statistics do not use cookies and do not build profiles of individuals.
4. Recipients
- Hosting providerstores the website and server logs on our behalf.
- Google (AdSense)serves advertising. In the EEA, UK and Switzerland, Google asks for your consent before using cookies for personalised advertising. Learn more at How Google uses information from sites that use its services.
- Email delivery providerif you contact us and we reply, the reply may be sent through an email delivery service.
We do not sell personal data.
5. International transfers
Some recipients, such as Google, may process data outside the EEA/UK. Such transfers rely on adequacy decisions or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate data;
- Erase your data (“right to be forgotten”);
- Restrict processing;
- Data portability;
- Object to processing based on legitimate interests;
- Withdraw consent at any time, for example for personalised ads, through the privacy/consent link shown on the site or your Google Ads Settings;
- Lodge a complaint with your local data protection supervisory authority.
To exercise your rights, contact us through the contact page. We will respond within one month. We may ask for information to confirm your identity.
7. Automated decisions
We do not make decisions with legal or similarly significant effects based solely on automated processing.
8. Children
Our services are not directed at children under 16, and we do not knowingly collect their personal data.