Privacy policy

Your files never leave your device, so this list is short. Here is everything the site does handle, who handles it, and how to have it deleted.

everything declared

The short version

Your files
Processed in your browser. Never uploaded, so we never have them.
Cookies
The site sets none.
Analytics and ads
None.
Pro waitlist
Only if you join: your email, the day you joined, the language of the page you signed up on and which consent text you agreed to. Kept until Pro is announced, or until you ask us to delete it.

Who's responsible

The controller of the personal data described on this page is Francesco Basile, an individual based in Italy, who builds and runs Eolietech as candygoogy.

Eolietech has not appointed a data protection officer, so your message goes straight to the person who runs the site. For anything about your data, write to:

Your files stay on your device

The tools open, convert and compress your files with code that runs in your browser. Your images, PDFs and audio are never sent to eolietech.com or to anyone else, so we can't see, keep or share them.

Your browser enforces this. Every page is served with a Content-Security-Policy that includes connect-src 'self', which stops the page's scripts from connecting to any other server. The security page shows how to check it with your browser's developer tools.

What your browser keeps

The background remover and the audio transcriber run AI models. The first time you use one, your browser downloads the model files from eolietech.com and keeps them in its Cache Storage, so the next visit doesn't download them again. They are the same files for everyone and contain nothing about you.

Like with any website, your browser may also keep copies of the pages and the tools' code in its ordinary cache.

To remove all of it, delete the stored data for eolietech.com in your browser's settings. Most browsers list it under privacy, as site data or as cookies and site data. The only effect is that the models download again the next time you use those tools.

If you join the Pro waitlist

The waitlist on the pricing page is the only place the site asks for personal data. If you join, we store four things:

  • your email address;
  • the day you joined (a date in UTC, with no time);
  • the language of the page you signed up on (English or Italian), so the email reaches you in that language;
  • which version of the waitlist text you agreed to, so we can show what you said yes to.

Nothing else goes in the list: no name, no IP address, no device details. Your IP address is used for a moment while you sign up, to limit repeated attempts from the same connection and to pass to the spam check described below. It is not saved in the waitlist.

We use your email address for one thing: to tell you when Pro launches. No newsletter, no other marketing, and we never sell or share the list.

The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time; that doesn't make our earlier use of your address unlawful.

We keep your entry until Pro has launched and the announcement has been sent, or until you ask to be removed, whichever comes first. Then we delete it.

The list is stored in a Cloudflare D1 database in Cloudflare's EU jurisdiction, so it stays inside the European Union. The sign-up code never writes your email address to a log; Cloudflare keeps technical logs of requests to the sign-up address for up to 7 days, so errors can be found.

There is no unsubscribe link yet. To leave the list, or to see or correct your entry, email us from the address you signed up with and we'll do it by hand:

The spam check on the pricing page

To keep bots off the waitlist, the form uses Cloudflare Turnstile. It loads only on the pricing page, and only once the form scrolls close to view. No other page loads it.

According to Cloudflare's Turnstile privacy addendum, Turnstile processes your IP address, a TLS fingerprint, your browser's user agent, and the site key and origin of the page, to tell people from bots. Cloudflare states that the purpose is not to identify, profile or target individuals.

Cloudflare handles these signals for us as a processor. It also acts as an independent controller when it uses them to improve Turnstile's bot detection.

The legal basis is our legitimate interest in keeping fake and abusive sign-ups off the list (Article 6(1)(f) GDPR).

Cloudflare, the host

eolietech.com is hosted on Cloudflare, which acts as our processor. Like any web host, Cloudflare handles the data that comes with every request, such as your IP address, your browser's user agent and the address of the page, to deliver the site and protect it from attacks.

The site runs no analytics scripts. The owner may look at the aggregated traffic statistics Cloudflare shows in its dashboard, such as how many requests the site received. They come from Cloudflare's normal handling of requests; nothing extra is collected for them.

The legal basis is our legitimate interest in running a site that works and stays secure (Article 6(1)(f) GDPR).

If you email us

If you write to info@eolietech.com, we keep your message, your email address and whatever else you put in it, such as your name or an attachment. We use them only to read your message, answer it and do what you asked.

Our mail is hosted by Fastmail Pty Ltd, a company based in Australia, which handles it for us as a processor under its data protection agreement.

The legal basis is our legitimate interest in answering the people who write to us (Article 6(1)(f) GDPR). When you write to use one of your rights under the GDPR, answering is our legal obligation (Article 6(1)(c) GDPR).

We keep the conversation for as long as it takes to deal with it, and delete it at the latest 12 months after the last message. You can ask us to delete it sooner.

What we don't do

  • Upload the files you open in a tool.
  • Set cookies, or keep anything in your browser besides the files described above.
  • Load analytics, tracking or advertising scripts.
  • Sell, rent or share your data for marketing.
  • Ask you to create an account.

Data outside the EU

Cloudflare, Inc. is a US company with a worldwide network, so request data and Turnstile signals may be processed outside the European Union, including in the United States. Cloudflare states that it is certified under the EU-U.S. Data Privacy Framework, and that it relies on the standard contractual clauses if that certification lapses.

The waitlist database itself is kept in Cloudflare's EU jurisdiction, as described above.

Fastmail, our mail host, may transfer email data to other countries; its privacy policy names the United States, Australia and India among them. For data leaving the EU, Fastmail states that it uses the European Commission's standard contractual clauses.

Your rights

Under the GDPR you have the right to:

  • access the data we hold about you and get a copy of it;
  • have it corrected if it's wrong;
  • have it erased;
  • restrict how we use it;
  • object to any use based on our legitimate interests;
  • receive the data you gave us in a portable format;
  • withdraw your consent at any time, without affecting what happened before.

To use any of them, write to us. We answer within one month, and we may ask you to write from the address in question, so we know the request is really yours:

If you think we've handled your data wrongly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority of the EU country where you live.

When this page changes

When this policy changes, the date at the top changes with it. If a change affects what you agreed to when you joined the waitlist, we'll ask for your consent again instead of assuming it.