Privacy policy

Summary

• Your files are not uploaded to any server, ours or anyone else’s: they are processed inside your browser and never reach us.
• No account is needed, and you do not give us your name or email address to use the tools.
• We measure how the site is used anonymously with Google Analytics. We never send the names or contents of your files.
• If you rate a tool, we keep your rating and whatever you write, without your name or email address. To prevent abuse we keep, for 30 days, an irreversible fingerprint of your connection, never your IP address.
• The site is funded by Google AdSense advertising, which may use cookies. From the European Economic Area, the United Kingdom and Switzerland, we ask for your consent first.

Data controller

The controller of the personal data described in this policy is Willian Diaz, a natural person based in Medellín, Colombia, who operates Koliby. You can contact the controller at info@koliby.app.

Koliby does not store the files you process with the tools: they stay on your device, as explained below. The handling of personal data is limited to the following:

• the messages and email addresses of people who write to us, to reply to them and, where relevant, to improve the site;
• the ratings, comments and tool suggestions you send, to learn how useful each tool is and to decide what to improve and which tools to build;
• the usage data collected by Google Analytics, to measure in aggregate which pages and tools are used so they can be improved;
• the data collected by Google AdSense advertising cookies or identifiers, to show the ads that fund the free service.

Analytics and advertising data is collected and handled by Google under its own policies, which we link to below. Providing personal data is voluntary: you do not need to give us any to use the tools, and we do not ask for sensitive data.

Your files stay on your device

When you choose a file, your browser opens it and processes it on your own device using the page’s code. The result is created there too, and you download or save it yourself. Our code does not send the contents of your files to any server.

That is why we cannot see, copy, recover or delete your files: we never have them. When you close or reload the page, the browser releases what it had processed.

You can check this yourself: open your browser’s developer tools, go to the network tab and notice that, when you process a file, your file is not sent anywhere.

Technical data about your visit

The site is delivered through Cloudflare, which acts as hosting provider and content delivery network. To deliver the pages, Cloudflare handles technical data about each request, such as the IP address, the type of browser and the date and time, and may keep it in security and operational logs. We do not use that data to identify you.

Usage analytics with Google Analytics

We use Google Analytics 4 to understand, in aggregate, how the site is used: which pages are visited, from what kind of device and browser, from roughly which country and which tools are used.

To improve the tools we record simple events. Each one says that a task started, finished, was cancelled or failed, and may include:

• the tool used and the language of the page;
• how many files there were and a size range, for example “1-10MB”, never the exact size;
• how long the process took and the mode chosen: for video conversion, fast or compatible; for the password generator, only the kind of value (for example, a passphrase or a token); for Image to PDF, the page size chosen (fit to image, A4 or Letter);
• if it failed, a short code for the reason, such as “out of memory”;
• if you rate a tool, how many stars you gave it, never what you write.

We do not send file names, contents or anything derived from them beyond those counts and ranges. From the password generator we send no password, token, text or hash, not even its length.

Google Analytics may use cookies or identifiers to tell visits apart. According to Google’s documentation, Google Analytics 4 does not log or store IP addresses. Event data is kept for the period we configure in Google Analytics, which is never longer than 14 months.

Advertising with Google AdSense

To keep the tools free, Koliby shows advertising from Google AdSense. The ads do not depend on your files, which we never see.

• Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.
• Users may opt out of personalized advertising by visiting Google Ads Settings.
• You can also visit www.aboutads.info to learn how to opt out of a third-party vendor’s use of cookies for personalized advertising.

You can read how Google uses information from sites that use its services in How Google uses information from sites or apps that use our services.

If you turn personalization off, you will still see ads, but they will be less relevant to you.

Consent in the European Economic Area, the United Kingdom and Switzerland

If you visit the site from the European Economic Area, the United Kingdom or Switzerland, data storage for advertising and for analytics starts out switched off, following Google’s consent mode (“Consent Mode v2”). A consent message from a consent management platform (CMP) certified by Google asks for your choice before cookies or identifiers are used for personalized ads or to measure usage.

You can accept, reject or adjust your preferences. Afterwards you can change them or withdraw your consent using the privacy settings control of that message, when it is available, or by deleting this site’s cookies in your browser. Withdrawing consent does not affect processing done before. The legal basis for that processing is your consent.

Outside those regions, data storage for ads and analytics is on by default. You can limit it with your browser settings, with an extension that blocks ads and trackers, with the links in the previous section or with the Google Analytics opt-out browser add-on.

Cookies and browser storage

Koliby does not set cookies of its own. Any you may see come from the Google and Cloudflare services described in this policy.

For the files you choose we use no cookies, local storage or browser databases: they are kept in the tab’s memory while you work with them.

We keep only two things in your browser’s local storage: your theme (light or dark), if you pick one, and, for each tool, a mark saying that you already rated that tool or closed the rating form, with the date, for 30 days. That way we do not ask you every time. They are not cookies, they hold no personal data or anything you wrote, and they are not sent anywhere.

Who data is shared with

We do not sell personal data. The data described in this policy is handled by:

• Google, as the provider of Google Analytics and Google AdSense, and of the Gmail mailbox where we receive your comments;
• Cloudflare, as the hosting provider, the database where ratings are kept, the forwarder and sender of the emails, and the provider of the anti-spam check (Turnstile).

These providers may process data in countries other than yours, including countries outside the European Economic Area, under the safeguards and policies they publish. You can read the Google Privacy Policy.

Your rights

Depending on where you live, for example in the European Union under the General Data Protection Regulation, you may ask for access to your data, its correction or deletion, object to its processing, restrict it, request its portability and withdraw your consent. You may also lodge a complaint with the data protection authority of your country. If you are in Colombia, the next section details your rights and how to exercise them.

Because we do not have your name or email address, we normally cannot recognize you in the analytics and advertising data, which Google manages. For that data, use the Google controls listed above. For any other request, write to us at info@koliby.app.

Data subject rights under Colombian law

Law 1581 of 2012 (Ley 1581 de 2012), which sets out the general personal data protection regime in Colombia, and Decree 1377 of 2013 (Decreto 1377 de 2013), which partially regulates it, give data subjects, among others, these rights:

• to know, update and rectify your personal data;
• to request proof of the authorization you gave for its processing, except where the law does not require it;
• to be informed, on request, of how your data has been used;
• to revoke your authorization and request the deletion of your data when the processing does not respect the principles, rights and guarantees set out in the law;
• to access your processed personal data free of charge;
• to file complaints with the Superintendencia de Industria y Comercio (SIC) about infringements of the law.

We process the data you send us by email or through the rating form under the authorization you give by sending it, only for the purposes described in this policy. For analytics and advertising, you can decide through the consent message described above, where it appears, and through Google’s controls.

To exercise these rights, write to info@koliby.app with the details needed to identify you and a clear description of what you are asking: to consult, update, rectify or delete your data, or to revoke your authorization. Because Koliby does not store your files and has no user accounts, we can only handle requests about data you have sent us, such as your email messages or your comments.

We answer queries within 10 business days and claims within 15 business days, counted from receipt of the request. If it is not possible to reply within that time, we will tell you the reasons for the delay and the date on which we will handle your request, which will be no more than 5 additional business days for queries or 8 additional business days for claims.

If you believe your rights have been infringed, you can file a complaint with the Superintendencia de Industria y Comercio (SIC, the Superintendence of Industry and Commerce), Colombia’s data protection authority, at www.sic.gov.co. The law requires you to have first used the query or claim procedure with the data controller.

Ratings and comments

After using a tool you can rate it from 1 to 5 stars and, if you want, leave a comment and tell us which other free tool you would like to have. It is voluntary. When you send it, we keep:

• your rating, the tool, the language of the page, your approximate country (Cloudflare works it out from your connection; we do not keep your IP address) and the date. They are kept as long as the service is active, to calculate the average rating shown on each tool;
• your comment and your suggestion, if you write them, together with the above and without any data that identifies you. We keep them for up to 12 months and then delete them. In addition, each rating reaches us by email in a Gmail mailbox, where it stays until we delete it;
• a fingerprint of your connection: an irreversible code, calculated with a secret key from your IP address, that does not allow it to be recovered. It is used to stop the same person rating the same tool several times and to limit repeated attempts. We erase it from each rating once it is 30 days old (the cleanup runs every day), and the attempt counters tied to it disappear within a few days at most.

We do not ask for your name or email address, and we ask you not to write personal or sensitive data in comments. Because we do not know who you are, if you want a comment deleted, write to us at info@koliby.app with its text and the approximate date.

To check that you are a person and to stop spam we use Cloudflare Turnstile. Its code is loaded from Cloudflare only when the rating form is shown, and Cloudflare may process technical data about your browser and connection, as set out in its privacy policy.

In your browser we keep, for each tool, a mark saying that you already rated it or closed the form, for 30 days, so we do not show it to you every time. It does not include what you wrote or any identifier.

Messages you send us

If you write to info@koliby.app, we use your message and address only to reply to you and, where relevant, to improve the site. Messages reach an email address of our own through a forwarding service, and we keep them for as long as needed to deal with your enquiry. We do not share them with anyone. Please do not attach private documents.

Children

The site is not directed at children and we do not knowingly collect their data.

Changes to this policy

We may update this policy, for example when we add tools or change providers. The date at the top shows the latest revision. If a change is significant, we will highlight it on this page.

Contact

If you have questions about this policy, write to us at info@koliby.app.