Privacy Policy

1. Who we are

EllyTools ("we", "our", or "us") operates the website at ellytools.com. We provide free browser-based utilities (image, PDF, calculator, text, and productivity tools). This Privacy Policy explains how we handle your data when you visit or use the site.

2. The principle: your files stay on your device

All file processing happens entirely in your browser. When you use our tools (image resize, PDF merge, text conversion, video to GIF, etc.), the file you select is loaded into your browser's memory and processed locally using JavaScript and WebAssembly. We do not upload, transmit, store, or have any access to the files you process. Open your browser's Network tab during use — you will see no outgoing file traffic.

3. Data we collect

We collect a small amount of non-identifying technical data:

• Page-view analytics — Through Google Analytics 4, we collect anonymous statistics: pages visited, approximate location (country/region level), device type, browser, referrer, time spent. We do not collect IP addresses in identifiable form.
• Contact form submissions — When you use our /contact page, we store the email address (if you provide one), category, and message you enter. This is stored in Google Firebase Realtime Database and used solely to respond to your inquiry.
• Advertising cookies — Google AdSense (if enabled) and Google Analytics use cookies and similar identifiers on this site. See section 6 below.

4. Data we do NOT collect

• We do not require user accounts. No sign-up, no login, no profile.
• We do not upload or store any file you process with our tools.
• We do not sell, rent, or share your data with third parties for marketing.
• We do not collect identifying personal information (name, phone, address) unless you voluntarily provide it via the contact form.

5. Cookies

This site uses the following categories of cookies:

• Essential cookies — Set by Next.js / Vercel to identify your session, store your locale preference, and remember UI state. Cannot be disabled without breaking site functionality.
• Analytics cookies — Set by Google Analytics (_ga,_gid) to measure page-view statistics. Anonymous and aggregate.
• Advertising cookies — If/when Google AdSense is active on the site, it may set cookies (__gads, NID, etc.) to serve relevant advertisements based on your browsing history across the web.

You can disable or delete cookies in your browser settings. Disabling analytics or advertising cookies will not affect tool functionality.

6. Third-party services we use

• Vercel — Web hosting and content delivery. Vercel may log request metadata (IP, user agent) for operational purposes per their privacy policy.
• Google Analytics 4 — Anonymous usage analytics. Data is aggregated and IP-anonymized. Google's privacy policy.
• Google AdSense — Displays advertisements on the site. Google, as a third-party vendor, uses cookies to serve ads. Users may opt out of personalized advertising by visiting Google Ad Settings.
• Google Firebase — Used for the contact form submissions and admin push notifications. Data resides in Google's Firebase Realtime Database.

7. Advertising

We may display advertisements through Google AdSense. AdSense uses cookies and third-party identifiers to:

• Show ads based on a user's prior visits to this site or other sites
• Measure the performance and reach of ads
• Prevent the same ad from appearing too often to the same user

You can opt out of personalized advertising by visiting Google's Ad Settings or aboutads.info.

8. Your rights (GDPR — for EU/EEA residents)

If you reside in the European Union, the European Economic Area, or the United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right to access — Request a copy of the data we hold about you
• Right to rectification — Correct inaccurate data
• Right to erasure — Request deletion of your data
• Right to restrict processing — Limit how we use your data
• Right to data portability — Receive your data in a portable format
• Right to object — Object to certain processing, including advertising
• Right to withdraw consent — At any time, for any cookie-based processing

To exercise any of these rights, contact us via the contact page.

9. Your rights (CCPA — for California residents)

If you reside in California, the California Consumer Privacy Act (CCPA) grants you:

• The right to know what personal information we collect, use, and share
• The right to request deletion of your personal information
• The right to opt out of the "sale" of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising these rights

To exercise these rights, contact us via the contact page.

10. Data retention

• Analytics data — Retained per Google Analytics defaults (typically 26 months), then automatically deleted.
• Contact form submissions — Retained as long as needed to respond to the inquiry, plus up to 12 months for record-keeping. Deleted upon request.
• Cookies — Expire per individual cookie's lifespan (session to 13 months for AdSense).

11. International data transfers

Our servers (Vercel, Google Cloud) are located primarily in the United States and European Union. By using the site, you consent to the transfer of your data to these regions. Both Vercel and Google have adopted standard contractual clauses and equivalent safeguards for international data transfers.

12. Children's privacy

Our services are not directed to children under 13 (US) / 16 (EU). We do not knowingly collect information from children. If you believe a child has provided us information, please contact us so we can delete it.

13. External links

The site may contain links to external websites. We are not responsible for the privacy practices of those sites — review each one's privacy policy independently.

14. Changes to this policy

We may update this Privacy Policy occasionally — for example, when we add a new third-party service, or when regulations change. Material changes will be posted on this page with an updated "Last updated" date at the top. Continued use of the site after changes constitutes acceptance.

15. Contact

If you have questions about this Privacy Policy, your data, or want to exercise any of the rights above, please use our contact page. We aim to respond within 7 business days.