Privacy Policy

Overview

NebulaTool ("we," "us," "our") operates the website nebulatool.com. We are committed to protecting your privacy. This policy explains what data we collect, why we collect it, and your rights regarding that data.

Data Controller

The data controller responsible for your personal data is:

For any privacy-related inquiries, you can contact our Data Protection Officer at privacy@nebulatool.com.

Client-Side Processing

All NebulaTool utilities run entirely in your browser. When you use any tool — whether formatting JSON, compressing images, or generating QR codes — your files and data are processed locally on your device. We do not upload, transmit, or store any files or tool input on our servers.

Data We Do Not Collect

• Files you process through any tool
• Text, code, or data you paste into any tool
• Images, PDFs, or documents you work with
• Personally identifiable information (name, email, etc.) unless you voluntarily contact us

Data We Collect

We collect limited data through third-party services to operate and improve our website:

• Analytics data — anonymized usage data such as pages visited, time on site, device type, browser type, and general geographic region (country/city level). Collected via Google Analytics 4 and Vercel Analytics.
• Advertising data — our advertising partners (Google AdSense) may collect data to serve relevant advertisements. This may include cookie identifiers and browsing activity.
• Server logs — our hosting provider (Vercel) automatically collects IP addresses, request timestamps, and user agent strings as part of standard web server operation. These logs are retained for up to 30 days for security and debugging purposes.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent (Article 6(1)(a) GDPR) — for analytics cookies and advertising cookies. You provide consent through our cookie consent banner and may withdraw consent at any time.
• Legitimate Interest (Article 6(1)(f) GDPR) — for essential website operation, security monitoring, and fraud prevention via server logs.

Cookies

Cookies are small text files stored on your device. We use the following types:

You can manage your cookie preferences at any time using the cookie settings button in the bottom-left corner of any page, or by clearing cookies in your browser settings.

Data Retention

• Tool data: Not retained. All tool processing happens in your browser and data is discarded when you close the page.
• Analytics data: Retained by Google Analytics for up to 14 months, then automatically deleted.
• Server logs: Retained by Vercel for up to 30 days.
• Cookie consent preference: Stored locally in your browser for up to 365 days.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For EEA Residents (GDPR)

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate personal data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — request limitation of how we process your data
• Right to data portability — request a machine-readable copy of your data
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent for cookies at any time via the cookie settings

For California Residents (CCPA)

• Right to know — what personal information is collected, used, shared, or sold
• Right to delete — request deletion of personal information
• Right to opt-out — opt out of the sale of personal information. We do not sell personal information.
• Right to non-discrimination — equal service regardless of exercising privacy rights

To exercise any of these rights, contact us at privacy@nebulatool.com. We will respond within 30 days (GDPR) or 45 days (CCPA).

Third-Party Services

We use the following third-party services that may process your data:

• Google Analytics 4 — Privacy Policy
• Google AdSense — Ad Privacy Policy
• Vercel (hosting) — Privacy Policy

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

International Data Transfers

Our third-party service providers (Google, Vercel) may process data outside of the EEA. These transfers are protected by Standard Contractual Clauses (SCCs) and the providers' compliance with applicable data protection frameworks.

Children's Privacy

NebulaTool does not knowingly collect personal information from children under 16 (or under 13 in the United States). If you believe a child has provided us with personal information, please contact us at privacy@nebulatool.com and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. If we make material changes, we will notify you through a notice on our website. Your continued use of NebulaTool after any changes constitutes acceptance of the revised policy.

Contact & Data Protection Officer

If you have questions about this Privacy Policy or wish to exercise your data rights, contact our Data Protection Officer:

If you are in the EEA and believe your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local supervisory authority.