Privacy Policy

Last updated: 2026-10-27

Who We Are

Controller: [Company name], [address], [privacy contact email]

⚠ Placeholder to be filled before launch with your actual company details.

What Stays On Your Device

Everything that matters stays on your device:

• Your images: Analyzed locally by your browser. Never sent anywhere.
• AI results: Alt text, descriptions, captions—all generated on-device.
• Your edits: Any changes you make to the output.
• Settings & drafts: Stored in your browser's IndexedDB and localStorage.
• Auto-delete: All local data older than 7 days is automatically deleted.

You can manually clear all data anytime via the "Clear all" button in the tool.

What We Collect

Hosting & Security Logs (Legitimate Interest)

Our hosting provider, Cloudflare, logs basic technical data:

• Your IP address and geolocation (country-level)
• Pages you visit and time spent
• Referring URL and browser type
• Errors and security events

Lawful basis: Legitimate interest (security, abuse prevention, debugging).

Retention: Cloudflare keeps these logs for up to 30 days. We don't access them unless there's a security issue.

Analytics (Consent-Based)

We use Google Analytics 4 to understand how you use Neartool.

• Page views and time on site
• Which tools you use and how often
• General location (country/region, not exact)
• Device type and browser

Important: No image data, descriptions, or personal identifiers are sent to Google. Analytics runs only after you consent.

Lawful basis: Your consent (managed by our consent management platform).

Ads (Consent-Based, EEA/UK/CH Only)

Neartool uses Google AdSense to stay free.

• Outside EEA/UK/CH: Ads are non-personalized by default.
• Inside EEA/UK/CH: We ask for your consent before showing personalized ads.

Lawful basis: Your consent (where required by law).

Ad networks use cookies (see Cookie Table below). Ads never see your images—they run in a separate frame.

Contact Form Data (Contract / Legitimate Interest)

When you contact us, we collect:

• Your email address
• Name (optional)
• Message

Purpose: To reply to your message and keep a record for customer support.

Retention: We keep contact messages for up to 12 months, then delete them.

Lawful basis: Contract (our obligation to respond) and legitimate interest (customer support).

Cookie Table

Data Processors & Recipients

Your data may be shared with:

• Cloudflare: Hosting provider (logs, DDoS protection)
• Google: Analytics and ad networks
• Form service provider: Contact form processing
• Consent management platform: Managing your privacy choices

We do not sell or rent your data to third parties.

International Data Transfers

Some processors (Google, Cloudflare) operate in the United States. Where applicable, we rely on:

• EU-US Data Privacy Framework (DPF): For transfers to US-based processors.
• Standard Contractual Clauses (SCCs): Where the DPF doesn't apply.

Data Retention

• Hosting logs: Up to 30 days (Cloudflare)
• Analytics: 14 months (Google Analytics default)
• Ad cookies: Varies by network (see Cookie Table)
• Contact form data: Up to 12 months, then deleted
• Local data (on your device): Auto-deleted after 7 days

Your Rights

Under GDPR, CCPA, and similar laws, you have the right to:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (right to be forgotten).
• Restriction: Limit how we use your data.
• Portability: Get your data in a portable format.
• Objection: Opt out of marketing or profiling.
• Withdraw consent: Change your privacy choices anytime.

How to exercise your rights: Email us at [privacy email] with your request. We'll respond within 30 days.

Right to Complain

If you believe we've violated your privacy rights, you have the right to lodge a complaint with your national data protection authority:

• EEA: Your country's supervisory authority (e.g., ICO in UK, CNIL in France)
• US: State attorney general (varies by state)
• Other regions: Your equivalent privacy regulator

Children

Neartool is not directed to anyone under 16 years of age. We don't knowingly collect data from children. If we become aware that a child has provided personal data, we'll delete it promptly.

Privacy Settings

You can change your privacy choices anytime by clicking the privacy settings link in the footer. This reopens the consent prompt, letting you:

• Accept or decline analytics
• Accept or decline personalized ads (EEA/UK/CH only)
• Choose cookie preferences

Note: The tool itself runs in a separate origin without ads or analytics scripts, so your image processing is always private.

Changes to This Policy

We may update this policy from time to time. Changes will be posted here with an updated date. Your continued use means you accept the updated policy.

Built with GDPR in Mind

Neartool is built with GDPR in mind. We do not claim GDPR certification, and we cannot guarantee compliance. We've designed our service with privacy by default (on-device processing, minimal collection, user control).