Skip to main content

Privacy Policy

Your Privacy Matters

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the legal notice on this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be data that you send us by email, for example.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This is mainly technical data (e.g., Internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors (server log files, see section 4). In addition, two tools load one JavaScript library each from a content delivery network (see section 3.3). We do not use any analytics, tracking or advertising services.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. Privacy-First Approach for Tools

All tools on this website process your input data exclusively in your browser. When you use our tools (e.g., Base64 encoder, JSON formatter, etc.), the following applies:

  • All conversions, validations, and generations are performed on the client side in your browser
  • Your input data in the tools never leaves your device
  • We do not store, log, or have access to data that you process with our tools
  • We cannot provide any information about tool input data that we do not have, because we do not collect it

Important note: This applies exclusively to the processing of your data within the tools. However, when you visit the website in general, technical data is collected automatically in server log files (see section 4), and when you use the QR code generator or minify JavaScript in the code formatter, a library is loaded from a CDN (see section 3.3).

3. Security & Transparency

We implement multiple layers of security to protect your privacy and ensure the integrity of our tools:

3.1 Open Source & Auditability

The complete source code is publicly available on GitHub. You can review, audit, or fork the project at any time:

github.com/RamonKaes/WebDev-Tools

3.2 Subresource Integrity (SRI)

All external libraries are loaded with cryptographic SRI hashes to prevent tampering. This ensures that third-party code cannot be modified without detection:

Library Version SRI Hash (SHA-384)
qrcode-generator 1.4.4 sha384-lQXOAyZwHXE55JFyr...TcIwz
terser 5.31.0 sha384-Be6gQ8oRB6kvVWiyo...1v7dX

Full SRI hashes can be verified in our source code (config/tools.php and codeFormatterTool.js).

3.3 Third-Party Content Delivery (CDN)

Bootstrap, the icon font and all other assets are hosted on our own server. Only two tools load a single JavaScript library from the content delivery network jsDelivr (cdn.jsdelivr.net), operated by Prospect One (jsDelivr) and delivered via several CDN providers, including Cloudflare and Fastly:

  • QR Code Generator: loads qrcode-generator when the tool page is opened.
  • Code Formatter: loads terser only when you minify JavaScript code.

When one of these libraries is loaded, your browser connects directly to the CDN and transmits the technical data required for this, in particular your IP address, your user agent and the referring page (referrer). We ourselves receive no data from this process. The libraries are protected by SRI hashes (see 3.2) and can therefore not be modified unnoticed. Apart from this, this website does not make any requests to third-party servers; only the SRI generator retrieves the resource URL that you yourself enter.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing these tools reliably and efficiently. Further information can be found in the jsDelivr privacy policy: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net

3.4 Content Security Policy (CSP)

We implement strict Content Security Policies to prevent XSS attacks and unauthorized code execution:

  • Nonce-based script execution (prevents inline script injection)
  • Restricted external resource loading (scripts only from our own server and cdn.jsdelivr.net)
  • Frame embedding completely disabled (clickjacking protection)
  • Object and plugin execution blocked

3.5 Additional Security Headers

  • X-Frame-Options: DENY - Prevents iframe embedding attacks
  • X-Content-Type-Options: nosniff - Prevents MIME-type sniffing
  • Referrer-Policy: strict-origin-when-cross-origin - Limits referrer information leakage
  • Strict-Transport-Security (HSTS) - Enforces HTTPS connections with preload
  • Permissions-Policy - Disables unnecessary browser features (geolocation, camera, microphone, etc.)

3.6 Zero External Dependencies for Data Processing

All core data processing functions use native browser APIs only. External libraries are used solely for two auxiliary functions (QR code rendering and JavaScript minification) and are loaded with SRI verification.

4. Hosting & Server Log Files

4.1 Description and Scope of Data Processing

This website is hosted by an external service provider. If you use our website for informational purposes only (i.e., without registering or otherwise transmitting information), we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data:

  • IP address
  • User's internet service provider
  • Date and time of access
  • Browser type
  • Language and browser version
  • Content of the request
  • Time zone
  • Access status/HTTP status code
  • Amount of data
  • Websites from which the request originates (referrer URL)
  • Operating system

This data is not stored together with other personal data about you.

4.2 Purpose of Processing

This data is used for the purpose of providing you with a user-friendly, functional, and secure website with functions and content, as well as for optimization and statistical evaluation. The data is used exclusively for the technical operation and security of the website.

4.3 Legal Basis

The legal basis for this is our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR, which is also reflected in the above purposes.

4.4 Storage Period

For security reasons, we store this data in server log files for a storage period of 60 days. After this period has expired, it is automatically deleted unless we need to retain it for evidence purposes in the event of attacks on the server infrastructure or other legal violations. The data is not merged with other data sources.

5. Cookies Used

5.1 General Information about Cookies

Cookies are small text files that your Internet browser stores on your device. This website uses exactly one cookie, which is technically necessary. We do not use any session, analytics, tracking or third-party cookies, and no user profiles are created. Since no cookies requiring consent are used, no cookie banner is displayed.

5.2 Language Preference Cookie (Technically Necessary)

We use a single cookie to store your language preference:

  • Cookie name: webdev-tools-lang
  • Purpose: Stores your selected interface language (e.g., "en," "de," "pt")
  • Validity: 30 days
  • Stored data: Only a two-letter language code
  • Type: Technically necessary (enables basic language preference functionality)

This cookie does not contain any personal information and is used exclusively to provide you with content in your preferred language. You can delete this cookie at any time via your browser settings.

5.3 Legal Basis

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing you with the website in the language you have selected without having to ask for it on every page view. The cookie is strictly necessary for this function, so no consent is required.

5.4 Storage Period / Deletion

The cookie is automatically deleted after 30 days or as soon as you remove it manually. You can prevent cookies from being stored at any time via your browser settings; in that case, your language selection will not be saved and the website falls back to automatic language detection (URL, browser language). Here you will find information on deleting cookies for different browsers:

6. Contacting Us by Email/Post

6.1 Description and Scope of Data Processing

When you contact us by post or email, your details will be processed for the purpose of handling your contact request.

6.2 Legal Basis

The legal basis for the processing of the data is Art. 6 (1) (a) GDPR if you have given your consent. The legal basis for the processing of data transmitted in the course of a contact request or email or letter is Art. 6 (1) (f) GDPR. The controller has a legitimate interest in processing and storing the data in order to be able to respond to user inquiries, to preserve evidence for liability reasons, and to be able to comply with its legal retention obligations for business letters, if applicable. If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

6.3 Storage in CRM System

We may store your details and contact request in our customer relationship management system ("CRM system") or a comparable system.

6.4 Duration of Storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. We store inquiries from users who have an account or contract with us for up to two years after the end of the contract. In the case of legal archiving obligations, deletion takes place after their expiry in accordance with EU directives and national retention regulations.

6.5 Right to Object and Right to Erasure

You have the right to withdraw your consent to the processing of personal data at any time in accordance with Art. 6 (1) (a) GDPR. If you contact us by email, you can object to the storage of your personal data at any time.

7. Use of the Tools at Your Own Risk

You use all tools on this website at your own risk. Although we strive to provide accurate and reliable tools, we cannot guarantee that they are error-free or suitable for all purposes.

We accept no liability for:

  • Errors, inaccuracies, or malfunctions of the tools
  • Data loss or damage resulting from the use of the tools
  • Decisions made based on the results generated by our tools

Please independently verify critical results before using them in production environments.

8. Your Rights

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR): You have the right to request information about your personal data processed by us.
  • Right to rectification (Art. 16 GDPR): You have the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.
  • Right to erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data.
  • Restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data.
  • Data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Art. 21 GDPR): You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation.
  • Withdrawal of consent (Art. 7 (3) GDPR): You have the right to withdraw your consent at any time.
  • Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

If you have any questions about data protection, please contact us using the contact details provided in the legal notice.