Privacy Policy

The short version

• Files you upload are processed and then deleted automatically within 30 minutes. We never read, share, sell or train on them.
• We keep technical logs (IP address, time, tool, file type and size) for up to 30 days to run the service and stop abuse.
• We use Google Analytics and Microsoft Clarity to understand how the site is used, and Google AdSense to show ads that fund it. These set cookies; where the law requires it you are asked for consent first.
• There are no accounts, so we hold no names, email addresses or passwords unless you write to us.

Who we are

The service is operated by UltKit. You can reach us at [email protected] for any question about this policy or your data.

Files you upload

When you use a tool, the file you choose is transferred over HTTPS to our processing servers, converted, and stored only so you can download the result. Original and converted files are deleted automatically 30 minutes after processing finishes, and download links stop working at that time. Files are stored in job-isolated locations, are not indexed, and are not accessible to other users.

File contents are processed by software only. No employee or contractor views your files except where you explicitly send one to us by email for support, and we delete those when the issue is resolved. We do not use uploaded files for analytics, advertising, product research or machine-learning training.

The legal basis for processing files is performance of the service you request (GDPR Art. 6(1)(b)).

Technical logs

Our servers record, for each request: date and time, the tool used, the type and size of the file, the outcome (success or error), the IP address, and the browser's user-agent string. We use this to keep the service running, to measure load, to debug failures and to detect abuse such as automated bulk uploads. Logs are retained for up to 30 days and then deleted. File names and file contents are not written to logs.

The legal basis is our legitimate interest in operating a secure service (GDPR Art. 6(1)(f)).

Analytics

We use Google Analytics 4 and Microsoft Clarity to learn which pages are used, how people move through the site and where the interface fails. These services set cookies and collect your IP address (anonymised by Google Analytics), device and browser details, pages viewed and interactions such as clicks and scrolling. Clarity may record session replays of mouse movement and taps; text you type into form fields is masked and uploaded file contents are never included.

Analytics runs only after consent in regions that require it (the EU, EEA, United Kingdom and Switzerland). You can opt out at any time with Google's opt-out add-on, by withdrawing consent in the cookie notice where one is shown, or by blocking third-party cookies in your browser.

Advertising

UltKit is funded by Google AdSense. Google and its certified partners may use cookies and similar identifiers to show ads based on your previous visits to this and other websites, and to measure ad performance. In regions that require consent you are asked before personalised ads are shown; if you decline, ads are still displayed but are not personalised.

You can control personalised advertising in Google's Ads Settings and learn about partner cookies at aboutads.info.

Cookies

• Strictly necessary: the cookie that remembers your consent choice and the ultkit-theme preference that stores light or dark mode (local storage, never sent to us).
• Analytics: Google Analytics (_ga, _ga_*, up to 2 years) and Microsoft Clarity (_clck, _clsk, up to 1 year).
• Advertising: Google AdSense and partner cookies as described above.
• Security: when a tool uses Cloudflare Turnstile to block bots, Cloudflare sets a short-lived cookie to verify the challenge.

Sharing and transfers

We share data only with the processors named in this policy (hosting, analytics, advertising and bot protection providers), each bound by a data-processing agreement, and with authorities where the law compels us. We never sell personal data. Our servers are hosted by Amazon Web Services and traffic is fronted by Cloudflare; some providers process data in the United States under standard contractual clauses or an adequacy framework.

Your rights

Depending on where you live you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, to withdraw consent, and to complain to a supervisory authority. Because we keep almost nothing that identifies you, most requests can be answered quickly; write to [email protected] and we will respond within 30 days.

California residents: we do not sell personal information and do not knowingly collect data from children under 16. You may exercise the rights above under the CCPA/CPRA by email.

Children

UltKit is not directed at children under 13 (or the age of digital consent in your country) and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We will update this page when our practices change and show the date at the top. Material changes are announced on the site for at least 30 days.