Privacy Policy

TL;DR

AllYouNeed runs entirely in your browser. We do not operate a backend, we do not have user accounts, and we do not store anything you enter into any tool on any server. The only third parties that can set cookies on this site are Google AdSense (advertising) and Cloudflare (hosting and anonymous performance metrics). For users in the EEA, UK, Switzerland, and California, we show a consent dialog via Google's certified Consent Management Platform before any advertising cookies are set.

1. Who we are (Data Controller)

The website allyouneed.dev is operated by an independent developer ("we", "us"). For any privacy-related request, contact us via the feedback form at the bottom of any page or write to the contact address published in our GitHub profile. We are the data controller for the limited personal data described below.

2. What data we do and don't collect

We never collect on our servers:

• Inputs, outputs, or results from any tool (calculators, text tools, converters, QR codes, etc.) — all computation happens client-side in JavaScript.
• Files you upload or images you process — nothing is transmitted off your device.
• Account information, names, emails (we have no accounts).
• IP addresses in our logs — we do not operate application servers.

Stored on your device only (not transmitted to us):

• allyouneed-theme — your dark/light theme preference.
• allyouneed-notepad — the content of the online Notepad tool (only if you use it).
• Your cookie consent choice, stored by Google's Consent Management Platform.

Collected by third parties (see section 4): When you consent, Google AdSense sets cookies to measure ad performance and (if selected) personalize ads. Cloudflare collects anonymous, aggregate request metrics.

3. Legal basis for processing (GDPR Art. 6)

• Consent (Art. 6(1)(a)): advertising cookies set by Google AdSense. You may withdraw consent at any time (see section 7).
• Legitimate interest (Art. 6(1)(f)): strictly necessary cookies and anonymous performance telemetry (Cloudflare) to deliver and secure the site.

4. Third-party services and cookies

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet. Users may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, users can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.

Named processors and international transfers

The third parties listed below process limited data on our behalf. All US-based processors are certified under the EU-US Data Privacy Framework (DPF), the lawful transfer mechanism since July 2023.

Right to object (GDPR Art. 21): you may object to any processing based on legitimate interest at any time by contacting us via the footer form. Right to withdraw consent (GDPR Art. 7(3)): you may withdraw consent at any time via the cookie banner (it reappears when you clear localStorage for this site). Withdrawal does not affect lawfulness of processing prior to withdrawal.

4.1 Google AdSense

We serve display ads via Google AdSense (publisher ID ca-pub-8761907366448308). Google may set cookies such as __gads, __gpi, IDE, and related identifiers to measure ad effectiveness and, if you consent, to personalize ads. Data may be transferred to and processed by Google in the United States under the EU-US Data Privacy Framework.

• Google Privacy Policy
• How Google uses advertising cookies
• Control personalized ads on Google
• Opt out of third-party advertising cookies (Digital Advertising Alliance)
• Your Online Choices (EU opt-out portal)

4.2 Google Funding Choices (Consent Management Platform)

We use Google's Funding Choices CMP to collect and manage consent as required by GDPR and the ePrivacy Directive. The CMP displays a consent dialog to users in the EEA, UK, Switzerland, and California. Your choice is stored in a cookie (e.g. __gpi_optout or IAB TCF consent string) and signaled to Google's advertising services.

4.3 Cloudflare

This site is hosted on Cloudflare Pages. Cloudflare processes requests and may collect aggregate, anonymized data (page load time, visitor country) via Cloudflare Insights for performance and security. See Cloudflare's privacy policy.

4.4 Formspree (feedback form)

The feedback form in the footer is powered by Formspree. Only the text you type in the message box is transmitted when you click Send.

5. International data transfers

Google AdSense, Google's CMP, Cloudflare, and Formspree are US-based companies with global infrastructure. By using our site, data collected by these services may be transferred to and processed in the United States and other countries. These providers comply with the EU-US Data Privacy Framework and/or apply Standard Contractual Clauses (SCCs) where required.

6. Retention

We do not retain any personal data on our servers because we do not collect any. Locally stored preferences persist in your browser until you clear site data. Third-party cookies set by Google and Cloudflare have their own retention periods defined in their respective privacy policies (typically 13 months or less for advertising cookies).

7. Your rights (GDPR Articles 15-22, 77)

If the GDPR applies to you (EEA, UK), you have the right to:

• Access any personal data we hold about you (Art. 15).
• Rectify inaccurate personal data (Art. 16).
• Erasure ("right to be forgotten", Art. 17).
• Restrict processing (Art. 18).
• Data portability (Art. 20).
• Object to processing based on legitimate interest (Art. 21).
• Withdraw consent at any time (Art. 7(3)), as easily as it was given.
• Lodge a complaint with your local supervisory authority (Art. 77) if you consider your rights have been violated. For users in Spain: Agencia Española de Protección de Datos (AEPD).

Because we do not hold any personal data about you on our servers, exercising most of these rights is immediate: clearing your browser's data for allyouneed.dev removes all locally stored information.

To withdraw cookie consent: click the Cookie preferences link in the footer of any page, or clear browser cookies for this domain.

8. California residents (CCPA/CPRA)

We do not "sell" or "share" personal information as defined by the California Consumer Privacy Act. Google's CMP handles the CCPA consent signal ("Do Not Sell or Share") on our behalf for California users. You may exercise your rights via the Cookie preferences link.

9. Children's privacy

This site is not directed at children under 13 (COPPA) or 16 (GDPR Art. 8). We do not knowingly collect personal data from minors. If you believe a child has provided data through our site, contact us and we will investigate promptly.

10. Changes to this policy

We may update this policy as the site evolves or as legal requirements change. The "Last updated" date at the top reflects the most recent change. Material changes will be announced via a notice at the top of this page for at least 30 days.

11. Contact

For any privacy concern, right exercise, or complaint, use the feedback form in the footer of any page. We respond within 30 days as required by GDPR Art. 12(3).