Privacy information

Controller: Daniel Nemitz, Rheinstraße 68, 41749 Viersen, Germany. Contact: [email protected].

Website and hosting

The website is hosted by Cloudflare. Requests involve technical connection data, particularly IP address, time, URL and browser information. This data is required to provide and secure the website (Article 6(1)(f) GDPR). Cloudflare may also process data outside the EEA. Information on safeguards and retention: Cloudflare privacy policy.

Photos and exports

Image processing takes place entirely in your browser. We do not receive photos, filenames or EXIF data. They remain in memory until you clear the selection or close the page. You manage exported files yourself.

Essential browser access and balance

After your first file selection, a Secure/HttpOnly cookie stores a random access token for up to one year. Our Cloudflare D1 database stores only its hash, the access ID, remaining free exports, credits and random export request IDs. This supports the requested service and correct accounting (Article 6(1)(b) GDPR; essential access under section 25(2) of the German TDDDG). No IP address is stored for the free-use limit. The limit applies per browser access and can be bypassed by creating a new access; no fingerprinting is used. Server-side accounting protects the regular balance, not the downloaded program code from being copied.

Sessions expire after one year. Balances, export records and associated provider order IDs remain stored for recovery and accounting until the access is deleted on request; statutory retention requirements may continue to apply to actual purchases. Accounts are not currently deleted automatically. No photos or file contents are stored. Limited technical daily and hourly counters protect the interfaces against abuse.

Optional usage counting

Only after you actively tick the option on the tool page do we send the event types visit, import, export or purchase-link click to the same web host. The optional statistics store anonymous daily counts only, with no identifiers, IP addresses or file information. The separate essential balance management is described above. The host also receives technical connection data for these requests. The legal basis is consent (Article 6(1)(a) GDPR), which you can withdraw for future processing by unticking the option at any time. Your choice is stored in local browser storage until you withdraw it or delete it. You can withdraw consent by unticking the option on the tool page. Counts older than 90 days are removed when the next event arrives; without further traffic, they remain until cleanup. The tool remains fully functional without consent.

Purchases and contact

Sales are not enabled yet. The prepared payment integration uses Lemon Squeezy for payment processing and delivery; its notices apply at checkout. No photos, filenames, project names or notes are transmitted. Purchases are linked through a random order reference, without photo information. If you contact us by email, we process your message to reply and delete it when the matter is concluded, unless statutory retention obligations apply. Photo attachments are not required to use the tool.

Email waitlist

With your express consent, we store your email address, signup time and consent version for the NEUMEN waitlist (Article 6(1)(a) GDPR). Data is stored in Cloudflare D1 in the EU. No emails are currently sent, and ownership of the address is not yet verified. Entries therefore remain marked as unconfirmed. Email confirmation will be set up before any future sending. To withdraw consent and request deletion of your address: [email protected]. Unconfirmed entries older than 180 days are removed at the next successful signup; if there are no further signups, cleanup takes place on request or during the next maintenance. Photos and file contents are not transmitted with the signup.

Waitlist security check

Cloudflare Turnstile loads only when you submit the form, to limit automated signups. Cloudflare processes technical connection and browser data in the process. We do not pass your email address to Turnstile. The check is limited to this form; no advertising or analytics functions are activated. The legal basis is our legitimate interest in protecting the form against abuse (Article 6(1)(f) GDPR). Further information: Cloudflare Turnstile privacy policy.

To limit signup attempts, we use the IP address provided by the Cloudflare host only to generate an identifier tied to a secret and the current day. The raw IP address is not stored in the waitlist database. The temporary identifier and technical time-window counters are removed after expiry when further API requests arrive. They are not linked to the stored email addresses. This is pseudonymous security data, not anonymous usage statistics. Cloudflare’s own technical hosting data is described in the Website and hosting section.

Your rights

You can request access, rectification, erasure, restriction and, where applicable, data portability, and object to processing based on legitimate interests. You can withdraw consent and lodge a complaint with a data protection supervisory authority. For North Rhine-Westphalia: LDI NRW. Anonymous counts cannot be attributed to any individual.

Last updated: 14 September 2026.