Privacy Policy
Last updated: July 29, 2026
1. Controller
petuja.tools is operated by petuja Systems UG (haftungsbeschränkt). Full provider and contact details are available in the central imprint.
2. Principles
We process personal data only where necessary for secure website operation, communication or a tool function requested by you. Many converters, calculators and generators run entirely in your browser. Server-side functions process only the data required for the respective request.
3. Website access and server logs
When you access the website, technically required data such as IP address, date and time, requested URL, referrer, browser information and HTTP status may be processed. This supports delivery, error analysis, attack prevention and abuse protection. The legal basis is Art. 6(1)(f) GDPR. Server logs are retained only as long as required for operation and security or where legal obligations require longer retention.
4. Local storage
The website uses local browser storage for language, color mode and optional clock-tool settings. These values remain on your device and are not sent to us. Certain forms and security-sensitive functions use technically necessary session cookies for CSRF protection, session management and form limits; they expire when you close the browser. This storage is not used for tracking.
5. Visit counts and request limits
For individual tool view counts and abuse protection, we use pseudonymous IP identifiers. For IPv4, only the /24 network prefix is used before HMAC generation; for IPv6, the address is protected with HMAC. View-count identifiers are deleted after 60 minutes, and QuickAI request-limit identifiers after no more than three hours through regular technical cleanup. This processing supports secure, proportionate operation and is based on Art. 6(1)(f) GDPR.
6. DNS and IP tools
For DNS, MX, BIMI, reverse-DNS and similar network tools, the entered domain or IP address is passed to the server DNS resolver. The tools do not open an HTTP connection to the submitted domain; in particular, the BIMI checker does not download referenced logos or certificates. Inputs are not stored as a separate tool history.
7. Contact forms
If you contact us through a form, we process the content you enter, the related page URL, your optional email address and technical security data. The message is transmitted to our mailbox using TLS transport encryption and is not stored in the website database. We use the data only to handle your request and retain it in the mailbox only as long as needed for processing, evidence and legal obligations.
8. Cloudflare Turnstile
Our contact forms use Cloudflare Turnstile to detect automated spam and abuse. Cloudflare may process, in particular, IP address, browser and device information, interaction data, the page URL and a verification token. The legal basis is Art. 6(1)(f) GDPR. More information is available in the Cloudflare Privacy Policy.
9. QuickAI, AI SVG Generator and OpenRouter
When you actively use QuickAI or the AI SVG Generator, the text or prompt you enter, the requested AI action and the required technical parameters are sent server-side to OpenRouter. OpenRouter forwards the request to a selected model provider and returns the response to your browser. The application sets data_collection: deny, zdr: true and require_parameters: true on every request; it sends no browser headers, IP address, email address, session ID or trace identifier to OpenRouter. OpenRouter may still process technical metadata such as model, provider, token counts, cost and latency; depending on the provider, processing outside the EU or EEA may be possible. We do not store prompts or responses in the website database or AI metrics; only aggregate technical counters for requests, models, providers, tokens and costs without content are kept there. Do not enter sensitive or confidential data.
10. Recipients and international transfers
Recipients of personal data may include hosting and email providers, Cloudflare and, for functions you actively request, their technical providers. The exact hosting and email providers and applicable safeguards for transfers outside the EU or EEA are determined by the contracts and provider documentation in use. External links are only opened when you select them; their respective providers are responsible for their content and privacy practices.
11. Your rights
Subject to the GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. You also have the right to lodge a complaint with a data protection supervisory authority.
12. Updates
We update this privacy policy when functions, providers or legal bases change.
13. Google AdSense, advertising and consent management
We use Google AdSense on petuja.tools. For users in the EEA, the provider is generally Google Ireland Limited; depending on the service, Google LLC and the advertising partners listed in the consent interface may be additional recipients. When the AdSense code loads, data needed to deliver the consent interface may already be sent to Google, in particular the IP address, browser and device information, requested page, referrer, time and security data. With your consent, Google and its advertising partners may use cookies or comparable storage technologies and process page views, consent choices and ad interactions for personalized or non-personalized advertising, audience measurement, reporting and fraud prevention. The legal basis for consent is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Processing necessary for transmission, security and abuse prevention may be based on Art. 6(1)(f) GDPR. If you decline, we do not permit personalized advertising or cookie-based non-personalized advertising; at most, limited ads supported by Google without consent may be delivered in accordance with the selected AdSense settings. Data may also be processed outside the EEA, subject to the transfer mechanisms and safeguards described by Google. Retention depends on the purpose, consent status and settings of the providers involved. You can change your choice at any time with effect for the future through “Privacy and cookie settings” in the footer. Learn more about how Google uses data on partner sites, the Google Privacy Policy and Google Ads Settings.
1. Controller
petuja.tools is operated by petuja Systems UG (haftungsbeschränkt). Full provider and contact details are available in the central imprint.
2. Principles
We process personal data only where necessary for secure website operation, communication or a tool function requested by you. Many converters, calculators and generators run entirely in your browser. Server-side functions process only the data required for the respective request.
3. Website access and server logs
When you access the website, technically required data such as IP address, date and time, requested URL, referrer, browser information and HTTP status may be processed. This supports delivery, error analysis, attack prevention and abuse protection. The legal basis is Art. 6(1)(f) GDPR. Server logs are retained only as long as required for operation and security or where legal obligations require longer retention.
4. Local storage
The website uses local browser storage for language, color mode and optional clock-tool settings. These values remain on your device and are not sent to us. Certain forms and security-sensitive functions use technically necessary session cookies for CSRF protection, session management and form limits; they expire when you close the browser. This storage is not used for tracking.
5. Visit counts and request limits
For individual tool view counts and abuse protection, we use pseudonymous IP identifiers. For IPv4, only the /24 network prefix is used before HMAC generation; for IPv6, the address is protected with HMAC. View-count identifiers are deleted after 60 minutes, and QuickAI request-limit identifiers after no more than three hours through regular technical cleanup. This processing supports secure, proportionate operation and is based on Art. 6(1)(f) GDPR.
6. DNS and IP tools
For DNS, MX, BIMI, reverse-DNS and similar network tools, the entered domain or IP address is passed to the server DNS resolver. The tools do not open an HTTP connection to the submitted domain; in particular, the BIMI checker does not download referenced logos or certificates. Inputs are not stored as a separate tool history.
7. Contact forms
If you contact us through a form, we process the content you enter, the related page URL, your optional email address and technical security data. The message is transmitted to our mailbox using TLS transport encryption and is not stored in the website database. We use the data only to handle your request and retain it in the mailbox only as long as needed for processing, evidence and legal obligations.
8. Cloudflare Turnstile
Our contact forms use Cloudflare Turnstile to detect automated spam and abuse. Cloudflare may process, in particular, IP address, browser and device information, interaction data, the page URL and a verification token. The legal basis is Art. 6(1)(f) GDPR. More information is available in the Cloudflare Privacy Policy.
9. QuickAI, AI SVG Generator and OpenRouter
When you actively use QuickAI or the AI SVG Generator, the text or prompt you enter, the requested AI action and the required technical parameters are sent server-side to OpenRouter. OpenRouter forwards the request to a selected model provider and returns the response to your browser. The application sets data_collection: deny, zdr: true and require_parameters: true on every request; it sends no browser headers, IP address, email address, session ID or trace identifier to OpenRouter. OpenRouter may still process technical metadata such as model, provider, token counts, cost and latency; depending on the provider, processing outside the EU or EEA may be possible. We do not store prompts or responses in the website database or AI metrics; only aggregate technical counters for requests, models, providers, tokens and costs without content are kept there. Do not enter sensitive or confidential data.
10. Recipients and international transfers
Recipients of personal data may include hosting and email providers, Cloudflare and, for functions you actively request, their technical providers. The exact hosting and email providers and applicable safeguards for transfers outside the EU or EEA are determined by the contracts and provider documentation in use. External links are only opened when you select them; their respective providers are responsible for their content and privacy practices.
11. Your rights
Subject to the GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. You also have the right to lodge a complaint with a data protection supervisory authority.
12. Updates
We update this privacy policy when functions, providers or legal bases change.
13. Google AdSense, advertising and consent management
We use Google AdSense on petuja.tools. For users in the EEA, the provider is generally Google Ireland Limited; depending on the service, Google LLC and the advertising partners listed in the consent interface may be additional recipients. When the AdSense code loads, data needed to deliver the consent interface may already be sent to Google, in particular the IP address, browser and device information, requested page, referrer, time and security data. With your consent, Google and its advertising partners may use cookies or comparable storage technologies and process page views, consent choices and ad interactions for personalized or non-personalized advertising, audience measurement, reporting and fraud prevention. The legal basis for consent is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Processing necessary for transmission, security and abuse prevention may be based on Art. 6(1)(f) GDPR. If you decline, we do not permit personalized advertising or cookie-based non-personalized advertising; at most, limited ads supported by Google without consent may be delivered in accordance with the selected AdSense settings. Data may also be processed outside the EEA, subject to the transfer mechanisms and safeguards described by Google. Retention depends on the purpose, consent status and settings of the providers involved. You can change your choice at any time with effect for the future through “Privacy and cookie settings” in the footer. Learn more about how Google uses data on partner sites, the Google Privacy Policy and Google Ads Settings.