Privacy Policy

Last updated: 3 November 2026  ·  Effective: 3 November 2026

This Privacy Policy explains how Utilixo Tools ("we", "us", "the Site") handles information when you visit box.599568.xyz and use any of its tools. It is written to meet the disclosure requirements of the EU and UK General Data Protection Regulation (Regulation (EU) 2016/679 and the UK GDPR), the ePrivacy Directive (2002/58/EC as amended), and to give all visitors — wherever they live — a clear account of what happens to their information.

1. The short version

Utilixo Tools is engineered so that your content never reaches us. Every calculator, converter and generator on this Site runs locally inside your own web browser using JavaScript. The text you paste, the numbers you enter and the files you select are processed on your device. They are not uploaded to our servers, not written to any database, and not shared with third parties by us.

Because the tools work locally, the great majority of visitors provide us with no personal data at all. The limited information described below arises only from the ordinary operation of a website (server logs, your theme preference) or from third parties whose content may appear on the page.

2. Who is the data controller

For the purposes of the GDPR, the data controller for this Site is the operator of Utilixo Tools, reachable at the contact page or by email at yokok8@outlook.com. We are established outside the European Economic Area and have not appointed an EU representative under Article 27, because the processing carried out on this Site is occasional and does not include large-scale processing of special category data or systematic monitoring of data subjects on a large scale. If that changes, this policy and our Article 27 arrangements will be updated.

3. What we do not collect

• We do not collect or store the text you paste into any tool.
• We do not collect or store the figures you type into any calculator.
• We do not upload images or files you choose — they are read into the page and processed on your device.
• We do not operate user accounts, so we hold no usernames, passwords or profile data.
• We do not knowingly process special category data (Article 9 GDPR: health, biometric, ethnic origin, political opinion, religious belief, trade union membership, sex life or sexual orientation). Some tools on this Site — for example the BMI, calorie and pregnancy calculators — invite you to enter health-related numbers. Those values are computed on your device and are never transmitted to us. Please do not send health information to us by email.

4. Personal data that may be processed

The following categories may arise in the ordinary operation of the Site:

• Technical and usage data — IP address, user-agent string, referring URL, the page requested, timestamp, and HTTP status. This is generated automatically by the hosting and delivery infrastructure.
• Device-stored preferences — a single local-storage value recording whether you prefer the light or the dark theme. This remains in your browser and is never transmitted by us.
• Voluntary correspondence — if you email us, we receive your email address and whatever you choose to write.
• Advertising and measurement data — if advertising is displayed, the advertising provider may process data as described in section 6.

5. Legal bases for processing (Article 6 GDPR)

• Article 6(1)(f) — legitimate interests. Delivering the pages, keeping the Site secure, preventing abuse and diagnosing faults. Our legitimate interest is operating a functioning public website; we do not override your rights by relying on it.
• Article 6(1)(a) — consent. Any non-essential cookie, advertising cookie or similar technology placed for visitors in the EEA, the UK or Switzerland is used only after you consent. You may refuse or withdraw consent at any time without detriment to your use of the tools.
• Article 6(1)(c) — legal obligation. Where we must retain or disclose information to comply with applicable law or a lawful request from an authority.

6. Cookies, advertising and the ePrivacy rules

We do not set first-party cookies for tracking. Third-party providers whose content may be embedded — for example an advertising network — can set their own cookies or use equivalent technologies such as local storage, pixel tags and device identifiers.

Under the ePrivacy Directive and national implementations, non-essential cookies require prior consent. Accordingly:

• For visitors identified as being in the EEA, the UK or Switzerland, an advertising or measurement script is not loaded until you consent. Declining does not restrict access to any tool.
• Your choice is stored locally in your browser, and you can change it at any time by clearing site data or through the consent controls presented on the page.
• Advertising providers act as independent controllers or joint controllers for their own processing. Their handling of data is governed by their own privacy notices, not by this policy. Where a provider offers an opt-out for interest-based advertising, links are available in its own documentation.

Most browsers let you block or delete cookies through their settings. Blocking cookies will not affect the tool calculations, because those run locally.

Google advertising

This site may display ads served by Google. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies (such as the DoubleClick cookie) enables Google and its partners to serve ads based on your visits to this site and/or other sites on the Internet.

You can opt out of personalised advertising by visiting Google Ads Settings. You can also visit www.aboutads.info to opt out of a third-party vendor's use of cookies for personalised advertising.

Apart from Google, no other advertising network currently serves ads on this site. If that changes, we will list those vendors here together with links to their websites.

7. International data transfers

Our hosting and delivery infrastructure operates globally, and third-party providers may process data outside the EEA. Where a transfer of personal data outside the EEA takes place, we rely on an adequacy decision of the European Commission where one exists, or on Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), together with any supplementary measures required by the receiving country's law. You may request further information about transfer safeguards using the contact details in section 12.

8. How long we keep data

• Local tool inputs — never received, therefore never retained.
• Server logs — retained by the infrastructure provider only for the short operational window needed for security and reliability.
• Theme preference — until you clear your browser storage.
• Correspondence — only for as long as needed to answer your enquiry and meet any legal obligation.

9. Your rights

Subject to the conditions and exceptions in the GDPR, you have the right to:

• Be informed — Articles 13 and 14, satisfied by this policy.
• Access — obtain confirmation of whether we process your personal data and a copy of it (Article 15).
• Rectification — have inaccurate data corrected and incomplete data completed (Article 16).
• Erasure — have your personal data deleted where one of the Article 17 grounds applies.
• Restriction — require us to restrict processing under Article 18.
• Data portability — receive data you provided in a structured, commonly used, machine-readable format, and have it transmitted to another controller (Article 20).
• Object — object to processing based on legitimate interests, including profiling (Article 21). Where personal data is processed for direct marketing, your objection is absolute.
• Withdraw consent — at any time, where processing is based on consent (Article 7(3)). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Not be subject to solely automated decisions — we carry out no automated decision-making producing legal effects or similarly significantly affecting you (Article 22).

10. How to exercise your rights

Write to us using the contact page or email yokok8@outlook.com. We will respond within one month of receiving your request; if the request is complex we may extend this by up to two further months and will tell you why (Article 12(3)). We will not charge a fee unless the request is manifestly unfounded or excessive. We may ask for enough information to verify your identity before acting.

11. Right to complain to a supervisory authority

If you are in the EEA or the UK and you believe we have handled your personal data unlawfully, you may lodge a complaint with your national data protection authority (in the UK, the Information Commissioner's Office). A current list of EEA authorities is published by the European Data Protection Board. You may also seek a remedy through the courts. We would appreciate the chance to address your concern first, and contacting us does not affect your right to complain.

12. Children

The Site is a general-purpose utility and is not directed at children. We do not knowingly collect personal data from children. Where the law requires consent for information society services offered directly to a child, the age of consent is that set by the child's Member State, between 13 and 16 years (Article 8 GDPR). If you believe a child has provided us with personal data, contact us and we will delete it.

13. Security

We apply technical and organisational measures appropriate to the risk, as required by Article 32: encrypted delivery of pages (HTTPS), no server-side retention of tool inputs, least-privilege access to hosting configuration, and regular review of the third-party components the Site relies on. No online service can be perfectly secure, and we cannot guarantee absolute security.

14. Personal data breaches

If a personal data breach occurs, we will notify the competent supervisory authority within 72 hours of becoming aware of it where the breach is likely to result in a risk to individuals (Article 33), and we will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms (Article 34).

15. Third-party websites

The Site may link to other websites. We are not responsible for their content or their privacy practices. Please read the notice on any site you visit.

16. Do Not Track and Global Privacy Control

We honour the principle behind browser Do Not Track signals and the Global Privacy Control: because we carry out no cross-site tracking of our own, there is nothing for us to disable. Third-party providers respond to those signals according to their own policies.

17. Visitors outside the EEA

If you visit from California, you may have rights under the CCPA/CPRA, including the right to know, delete and correct personal information and the right not to be discriminated against for exercising them. We do not sell personal information as that term is defined there. Residents of other jurisdictions may have comparable rights; contact us and we will consider your request.

18. Changes to this policy

We may update this policy. When we do, we will change the "Last updated" date at the top. If a change materially affects how we handle personal data, we will take reasonable steps to bring it to your attention.

19. Contact

Questions about this policy or about your data: contact page · yokok8@outlook.com