Privacy Policy
The short version
- On tools that process locally, your files and inputs stay in the browser. Notes on external services are on the tool itself and in this privacy notice.
- We use Cloudflare Web Analytics to measure how the site is used. This service does not use cookies. Other services are described below.
1. Controller
The controller for data processing on this website is the private individual operating kittokit as a non-commercial hobby project.
- Project
- kittokit, non-commercial hobby project, no advertising revenue
- Location
- Germany
- Contact
- kontakt@kittokit.com
kittokit is a non-commercial hobby project with no profit-making intention. For data protection enquiries please use email.
2. Hosting and Infrastructure
2.1 Cloudflare Pages
This website is hosted on Cloudflare Pages. When you visit a page, Cloudflare processes technically necessary connection data as a data processor on our behalf.
- Data processed
- IP address (potentially anonymised), requested URL, HTTP method, referrer, browser type, timestamp
- Purpose
- Website delivery, security, abuse prevention
- Legal basis
- Art. 6(1)(f) GDPR, legitimate interest in operating a publicly accessible website
- Retention
- Server logs for up to 7 days, then deleted automatically
- Recipient / third country
- Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, transfers to the USA are covered by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and the Cloudflare Data Processing Addendum
3. Analytics
3.1 Anonymous error counter
When a tool throws an error in your browser, the page sends us the tool's name, the page language and the kind of error. No IP address, no file, no input, no cookie. File names are stripped out of the error text before it is sent. We keep it because six PDF tools were broken for weeks without anyone noticing, and a per-tool counter closes that gap without recording who you are.
3.2 Cloudflare Web Analytics
We use Cloudflare Web Analytics, a privacy-friendly measurement system that sets no cookies and performs no cross-site tracking. No personal profiles are created.
- Data processed
- Pseudonymised page views, referrer, approximate geolocation (country), browser type, screen size, no individual user profile
- Legal basis
- Art. 6(1)(f) GDPR, legitimate interest in aggregated usage analysis to improve the website without profiling
- Retention
- Aggregated data for up to 90 days
- Recipient / third country
- Cloudflare, Inc., USA, EU Standard Contractual Clauses (see 2.1)
- Opt-out
- Because no personal profiles are created and no cookie is set, a formal opt-out is not required. The measurement respects the Do-Not-Track header sent by your browser.
4. Advertising
4.1 Google AdSense (planned)
We plan to integrate Google AdSense to display advertisements. It is not embedded today and sets no cookies. Turning it on later would require consent.
- Data processed
- Browsing behaviour, interest categories, cookie IDs, IP address
- Legal basis
- Art. 6(1)(a) GDPR, consent
- Retention
- Up to 13 months
- Recipient / third country
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, EU Standard Contractual Clauses
- Google privacy policy
- policies.google.com/privacy
5. Browser-side Storage
To display the site correctly we store two settings in your browser. The theme setting stays only in localStorage and does not leave your device.
The language preference is also stored in localStorage. When you choose a language, the page sets its own cookie kittokit-lang. It lasts one year, is sent only to this website, and opens the home page in the language you chose. Cloudflare does not set this cookie.
If you drop a file on the home page and click a tool, the file is kept briefly in your device's browser storage (IndexedDB, database kittokit-handoff) so the tool can open it directly. The tool takes it out when it loads and deletes it in the same step. If nobody picks it up, the page removes the entry after two minutes at the latest, the next time a file is dropped or picked up. The file is not sent to any server.
- Stored items
kittokit-theme(light/dark preference),kittokit-lang(language preference)- Legal basis
- Art. 6(1)(f) GDPR, technically necessary for correct display; no personal profile is created
- Retention
- localStorage until you clear it (browser settings, clear site data). The language cookie lasts 1 year.
- Recipient
- Theme: none. The language cookie is sent only to this website.
6. Using the Online Tools
On these locally processing tools, your files and inputs are not sent to our servers or to anyone else's servers for processing. Different data flows are described below and on the tool itself.
6.1 Weather Radar: Map and Weather Services
The Weather Radar tool represents a functional exception because it loads live radar data, numerical model forecasts and high-resolution base map tiles directly from the respective data providers. When loading these tiles, the providers process your IP address and the requested map bounds as an inherent part of the HTTP request:
- Official German Base Map
- Federal Agency for Cartography and Geodesy (BKG), Frankfurt am Main, Germany, server
sgx.geodatenzentrum.de - Satellite Background Map
- EOX IT Services GmbH, Vienna, Austria, server
tiles.maps.eox.at(Sentinel-2 cloudless mosaic) - Radar and ICON Forecast (Germany / Global)
- Deutscher Wetterdienst (DWD), Offenbach am Main, Germany, server
maps.dwd.de - Satellite Precipitation and Clouds (Europe / Africa)
- EUMETSAT, Darmstadt, Germany, server
view.eumetsat.int - Canada Radar Data
- Environment and Climate Change Canada, Gatineau, Canada, server
geo.weather.gc.ca(only when the map covers Canada) - Legal basis
- Art. 6(1)(f) GDPR (legitimate interest in providing geospatial and weather data for the viewed area)
6.2 US Weather Services Upon Consent Only
Imagery from US-based providers (NOAA composite via the Iowa Environmental Mesonet, server mesonet.agron.iastate.edu, and NASA GOES satellite imagery, server gibs.earthdata.nasa.gov) is loaded only after your explicit consent within the tool. The legal basis is Art. 6(1)(a) GDPR. Your decision is stored in localStorage under the key kittokit-radar-us-sources and may be revoked at any time by clearing your browser's site data.
6.3 Location Sharing
When you click the location button in the Weather Radar, the tool asks for confirmation before initiating the browser's geolocation prompt. The resolved coordinates remain entirely local on your device to center the map and display the accuracy radius. They are neither stored nor transmitted to kittokit. Once centered, your browser fetches map and weather tiles for your area from the providers listed above, who will see your IP address. Depending on your browser and operating system, positioning may involve third-party geolocation databases (such as Wi-Fi network directories) run by your browser vendor.
7. Contact
When you contact us by email, we process the data you provide in order to handle your enquiry.
- Data processed
- Name (if provided), email address, message content
- Legal basis
- Art. 6(1)(f) GDPR, legitimate interest in responding to user enquiries
- Retention
- Until the correspondence is concluded, then kept for 3 months and deleted
- Email routing
- Email delivery is forwarded via Cloudflare Email Routing (Cloudflare, Inc., USA, see section 2.1)
8. Cookie and Storage Overview
| Name / key | Provider | Purpose | Type | Retention | Legal basis |
|---|---|---|---|---|---|
kittokit-theme | Own operation | Theme preference (light/dark) | localStorage | Until manually cleared | Art. 6(1)(f) |
kittokit-lang | Own operation | Language preference | localStorage | Until manually cleared | Art. 6(1)(f) |
kittokit-radar-us-sources | Own operation | Consent for US weather services (NOAA, NASA) | localStorage | Until manually cleared | Art. 6(1)(a), consent |
kittokit-lang | Own operation | Chosen language for the home page | Cookie | 1 year | Art. 6(1)(f) |
kittokit-handoff | Own operation | Short-term file handoff from the home page to the chosen tool | IndexedDB | Deleted on pickup; leftovers after 2 minutes on the next access | Art. 6(1)(f) |
| AdSense | Not active, no cookies are set | not set | n/a | not applicable while the service is off |
There is no sitewide cookie banner. Consent for US weather sources sits inside the weather radar tool and can be withdrawn by clearing this site's data.
9. Recipients and Third-Country Transfers
We share personal data only where this is necessary to operate the website or where you have given your consent.
Cloudflare, Inc. is based in the United States. Microsoft Clarity is not embedded. Google AdSense is planned and not active. Transfers to Cloudflare in the USA are covered by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, the EU-U.S. Data Privacy Framework.
10. Your Rights as a Data Subject
Under the GDPR you have the following rights regarding your personal data:
- Access (Art. 15 GDPR)
- You may request information about the personal data we hold about you.
- Rectification (Art. 16 GDPR)
- You may request correction of inaccurate or completion of incomplete data.
- Erasure (Art. 17 GDPR)
- You may request deletion of your data, provided no legal retention obligation applies.
- Restriction (Art. 18 GDPR)
- You may request that we restrict the processing of your data.
- Portability (Art. 20 GDPR)
- You may request that we provide your data in a structured, common, machine-readable format.
- Objection (Art. 21 GDPR)
- You may object at any time to processing based on Art. 6(1)(f) GDPR (legitimate interest).
- Withdrawal of consent (Art. 7(3) GDPR)
- You can withdraw consent for US weather sources in the weather radar tool by clearing this site's data. For anything else, email us.
To exercise your rights, please contact us by email at the address listed in the Imprint.
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).
The competent supervisory authority is the data protection authority of the German federal state where the controller is domiciled:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
www.ldi.nrw.de
A list of all German data protection authorities is available at: bfdi.bund.de (in German)
12. Changes to this Privacy Policy
We reserve the right to update this privacy policy when the legal situation or our data processing practices change. The current version is always available on this page. We will display a notice on the website for material changes.