Privacy

Controller and contact details

Pietro Petrocchi
Maestri Comacini 29B, 6834 Morbio Inferiore, Switzerland
pietropetrocchi@protonmail.com

Purposes and grounds for processing

We provide the requested tools and process only the data needed to operate them. Where the GDPR applies, providing the requested service relies on Article 6(1)(b); abuse prevention and service continuity rely on our legitimate interest in security, Article 6(1)(f). We do not use files for model training, advertising or profiling. Requests to exercise privacy rights rely on legal obligations, Article 6(1)(c); other inquiries rely on our legitimate interest in responding, Article 6(1)(f).

Tools on your device

Calculators, generators and developer tools process data on the page. Expressions, passwords, tokens and results are not sent to the server or stored persistently by the application. Closing or reloading the page clears them.

QR codes, ZIP archives, XLSX/CSV conversions and voice recordings are processed on your device. The microphone starts only after your action and browser permission; you can stop it or reset the recording. Switching tabs pauses recording. Unsaved data is discarded when you reload or close the page.

Temporary files

PDF, image and audio tools displaying private upload require files to be sent for processing. The check on 23 October 2026 established that PHP-FPM uses the hosting temporary directory, separate from the private directory expected by the application. The test file had permissions 0600, accessible only to the operating-system user, and was removed at the end of the test request.

Queued originals are kept in private website storage while needed for processing, expiring within 2 hours. The conversion server processes files in private temporary directories on disk, in isolated processes without network access, and deletes originals before transferring results. The website deletes results after browser receipt, when you reset the tool or after 30 minutes; periodic cleanup runs within a further 5 minutes.

We do not maintain a document archive or send files to external converters.

Abuse prevention

The server receives technical data needed for the connection, including the IP address. To limit requests, the cache holds a key derived from the IP using a server secret, expiring within 10 minutes. This key is not added to statistics. Counters never contain names, contents, passwords or results.

Logs and retention

Application logs have daily rotation and date-based deletion with a configured retention of 14 days; they are not intended to contain files or entered values. Hosting and proxy logs may contain IP addresses, URLs, dates, browser information and technical paths. Infomaniak documents at least 7 days without specifying a maximum in that guide.

On 23 October 2026, hosting access archives dated from 21 September and error/PHP-FPM logs from 16 October were present: these are observations, not guaranteed limits. Verified maximum for hosting and proxy logs, in days: not confirmed. On the second server, Nginx logs use 14 daily rotations; without new writes this does not mean deletion after 14 days. System and authentication logs have a separate policy whose maximum retention is not yet confirmed.

Hosting dashboard statistics are separate from internal counters and Matomo.

Recipients and location

Website hosting checked in the Infomaniak Manager on 23 October 2026: Infomaniak, managed cloud server in Satigny, Switzerland. This does not yet verify the complete conversion and analytics infrastructure. Infomaniak Network SA provides the infrastructure; its public DPA states that it forms an integral part of the contractual terms. Applicable agreements and any subprocessors across the entire service still require verification. Authorities may receive data where required by law.

Switzerland benefits from an EU adequacy decision; this does not automatically cover onward transfers to other countries or other providers, including analytics and email. Conversions run on a separate Infomaniak server in Switzerland, as confirmed by the controller on 23 October 2026; its specific datacenter has not been verified. The website sends files to the processing server over an encrypted, authenticated SSH connection.

Hosting backups

On 23 October 2026, the Manager showed 7 daily hosting copies dated 17 to 23 October. No restoration was performed. Infomaniak states that backups are held in another Swiss datacenter. No exclusion for conversion directories or PHP temporary files was found in the panel inspected; their actual exclusion from backups and snapshots still requires provider confirmation.

Originals and results on both servers pass through temporary disk directories. A file present during a backup could therefore remain in a copy after working-file deletion. Deleting a file does not guarantee immediate deletion of every copy. Patchman is enabled on the hosting: Infomaniak terms provide for quarantine of files detected as malicious, with automatic deletion after six months.

Whether it also captures conversion uploads remains to be confirmed. We have not disabled these protections.

Email contact

If you write to the published contact, we process your email address and message to respond and handle your request. The email service used is Proton AG, Switzerland, with servers reported in Switzerland, Germany or Norway. Safeguards for any transfers and subprocessors must be checked for the actual configuration. Correspondence is retained as needed to respond and address any disputes, according to the periods applicable to protecting legal rights. Do not send confidential documents unless necessary.

Your rights

You may contact the controller for access, correction, deletion and, where applicable, restriction, portability and objection. You may withdraw consent for processing based on consent. You may contact the FDPIC or the competent EU supervisory authority and use remedies provided by law. Aggregate counters cannot reconstruct your operations; we do not collect additional data to identify you within them.

Providing data and automated decisions

Registration is optional. You only need it for tools marked as requiring a verified account. Conversions require the relevant files; without them we cannot perform the conversion. Automated processing produces the requested result without decisions having legal or similarly significant effects on a person. Advertising and profiling are not active.

Your personal workspace

Boards, cards and due dates stay in your verified account until deletion. Contents are encrypted in the database with a service-managed key, not end-to-end encryption. They are excluded from analytics. Export or erase all Kanban data here; backups follow the retention described in the privacy notice.

Up to 30 boards, 30 columns and 500 cards per board. Descriptions up to 4,000 characters.

PDF, Word documents, spreadsheets, presentations, images and EML/MSG emails. Up to 5 MB per file, 20 files per card and 100 MB per account. Files are private and encrypted in the database; deleting a card also deletes its attachments.

Reminders are optional and can be disabled at any time. Preferences remain until you erase your Kanban data; delivery dates and times are kept for 35 days, without card titles or content.

Anyone with this link can read titles, board names and deadlines. Descriptions and attachments excluded. Share only with your calendar. Regenerate or disable it to revoke previous access; downloaded copies remain with the external service.

How is AI text processed?

Your reviewed text is sent through our server to OpenAI to generate the result. We do not save text, files or results in your account and request no response storage as application state (store=false). OpenAI does not train models on API data by default; it may retain security logs for up to 30 days, subject to policy exceptions. This is external processing, without a zero retention guarantee. Abuse prevention counters contain only pseudonymous identifiers and counts, retained for up to 72 hours.

Remove information you do not want to share before sending. The original file stays on your device.

Puffinmint Capture privacy policy

The extension accesses the active tab when you start a capture. Screenshots, imported images, and edits are processed in your browser. The extension sends none of this data to Puffinmint or third parties, uses no telemetry, and requires no account.

Chrome stores screenshots temporarily in IndexedDB to pass them to the editor. The editor deletes that copy after loading it. The extension clears leftovers when Chrome starts or when a new capture is saved and a leftover is more than ten minutes old. Your language stays in your Chrome profile. An error code may stay in session memory until Chrome closes.

Use Clear or close the editor to discard the open work. Uninstall the extension to remove the saved language and any remaining local data. Downloaded files stay on your device until you delete them. Optional download permission is used to save multiple files together.

info@puffinmint.com

Website crawling for sitemap generation

The requested scan only discovers public links and returns a sitemap. URLs and progress are temporarily encrypted and associated with a random code and the technical session; HTML is read in memory and not archived. Results expire one hour after starting and automatic cleanup deletes them within the following minute; the delete button removes them earlier. The manual list and XML file are processed in your browser.

Requests originate from our Infomaniak hosting in Switzerland: visited websites receive the server address and crawler identifier and may log them. We do not send your cookies, credentials or IP address to those websites. Content is not used for advertising, profiling or training.

Necessary requester data is processed to fulfill the request (GDPR Article 6(1)(b)); abuse limits serve the legitimate interest of security (Article 6(1)(f)). Only scan websites you manage or are authorized to scan, and do not submit URLs containing personal or confidential data. The authorization declaration is not GDPR consent and does not replace a lawful basis for third-party data.

Abuse counters use an HMAC code of the IP address without storing its plain value; they expire within 24 hours and are deleted by minute-by-minute cleanup.

Send us a message

We use your email, message and optional name only to handle your enquiry and respond. We do not use them for marketing.

The form forwards your message to info@puffinmint.com through the OVHcloud email service. The site does not save its contents in a database; temporary tokens and a pseudonymised network identifier prevent abuse.

Where the GDPR applies, general enquiries rely on our legitimate interest in responding; pre-contract enquiries on your request, and privacy rights requests on legal obligations.

Correspondence stays in the mailbox for as long as necessary to handle the enquiry and meet any applicable obligations. The privacy notice explains the controller, recipients, retention and your rights.

Optional accounts and service emails

For accounts we store your email address, hashed password, language and confirmation date. These details authenticate you and provide access to restricted tools; they do not include temporary processing contents. For Kanban we also store boards, cards and due dates as described in the dedicated section. Confirmation and password recovery use info@puffinmint.com at OVHcloud, which processes addresses and service messages. This does not subscribe you to a newsletter. You can ask the controller to delete your account; backups follow the hosting retention periods described here. Account protection counters use pseudonymised keys derived from an IP address, email or account ID and expire within 24 hours. Password recovery tokens are stored as hashes and are valid for 60 minutes.

If you choose Google sign-in, Google shares your email address and an account identifier with us. We use them to sign you in and keep them while your account is active. Disconnecting Google removes the identifier from your profile. Google Privacy Policy

Favorites

Favorites are available to registered users. We store only the selected tool IDs in your account database until you remove them with the star or delete your account; backups follow the hosting retention policy. Files, entered text and results are excluded. The IDs of the last three tools opened are saved only in this browser’s localStorage under instrumenta.recent-tools.v1 until you clear site data. They are not sent to the server and contain no files, entered text or results. Account favorites do not use localStorage.

Aggregate statistics

Using a tool updates a MySQL counter containing only the UTC day, tool identifier, outcome and operation count. These counters contain no individual events, personal identifiers, IP addresses, file names, inputs or results. Browser tools send only the tool and outcome; for files we count the result prepared by the server or a processing failure, without tracking downloads. These are not unique visitor counts. Counters help improve the catalog, use a 365-day retention window with daily cleanup, and are not shared for advertising.

To check conversion performance, when technical collection is enabled we keep one record per operation for 30 days: tool, timestamps, wait, duration, outcome, error category and file size bands. A technical code identifies the operation without identifying the visitor or enabling downloads. We include no IP addresses, names, contents, options, passwords or results and use no cookies or visitor identifiers. Records are deleted through daily cleanup. These data help diagnose errors and delays and size the service.

To monitor website errors, we retain daily counts and technical details for 30 days: category, tool, page path without query strings or fragments, language, asset build, allowed resource path, technical error name, line and column, available HTTP status, and first and last occurrence. We also derive a client category (crawler, automation, other or unknown) without retaining the full user agent. We do not collect free-form messages, stack traces, files, entered text or results. Abuse protection uses an IP-derived key with a secret and a 10-minute expiry, separate from the counts. Administrator access also requires a one-use email code valid for 10 minutes; the cache retains only a cryptographic check of the code and the attempt count.

Cookieless Matomo

We measure page views with Matomo, operated by the controller at analytics.pietropetrocchi.it (site 9), separately from tool counters. Tracking cookies and browser feature detection are disabled. We send only the canonical page URL and title, without query strings, fragments or referrers; form, click, download, heatmap and session recording tracking are not enabled.

Matomo still receives connection data, including IP address and user agent, and may process technical identifiers: cookieless does not mean anonymous. We respect Do Not Track and Global Privacy Control by not loading the tracker when enabled.

Retention in days: not confirmed. Analytics hosting country: Switzerland. Privacy settings, identifiers, retention and the applicable conditions for consent exemption must be checked on the Matomo instance.

Matomo: Cookie notice