Definitions and data controller
CloudVertor is the project/website name under which the online tools available on the accessed domain are provided.
The legal operator of CloudVertor is VIBE DESIGN SRL, VAT ID RO50792284, registration no. J2014002831128, registered address: Cluj, Romania.
For privacy/GDPR requests, use https://cloudvertor.com/contact?department=privacy and select the privacy policy department.
Data we process
We process technical data required for operation: the IP address is used transiently for the request and transformed into a hash for application rate limiting/logs, user agent, request information, file names and files uploaded temporarily for the requested features.
We process aggregated statistics about tool usage, processed volume and optimizations performed. These statistics do not directly identify users.
We do not collect the recipient email when the user uses the mailto button; the email is composed in the user email client.
Uploaded files
Files are processed on the server for the requested feature and are not sent to external processing services, unless a future feature explicitly states otherwise.
Batches and ZIP archives expire after approximately 1 hour. Temporary files expire after approximately 30 minutes, and orphan files after approximately 3 hours.
We do not recommend uploading sensitive or confidential files or content if you do not accept temporary processing on the service infrastructure.
Processing may remove or change EXIF/XMP/ICC metadata, color profiles, transparency or other technical information depending on the selected settings and requested result.
Purposes and legal bases
Providing the requested features on CloudVertor, application security, abuse prevention, infrastructure administration, aggregated statistics and, where applicable, communications related to optional paid plans.
Legal bases may include performance of the requested feature, legitimate interest for security and improvement, legal obligations and consent for cookies/analytics/ads where required.
Security and abuse prevention
We use technical measures such as file validation, MIME/magic byte checks, size limits, rate limiting, temporary tokens, security logs and temporary blocks for abusive requests.
Security events may include rejected uploads, malformed requests, invalid tokens, rate limits, processing errors or attempts to access sensitive resources.
Application logs are used for security, diagnostics and abuse prevention and are not displayed publicly.
Providers and third parties
We may use providers such as: Hetzner, Cloudflare, Gmail SMTP pentru alerte interne, jsDelivr Bootstrap CDN, UptimeRobot, Google Analytics, Google Search Console, Google AdSense. In production, placeholder images will be replaced with local static files.
Google Analytics can load and set analytics cookies only after consent. Google AdSense is not enabled by the current consent manager.
Details about cookies, analytics and advertising are available in https://cloudvertor.com/cookie-policy.
Cloudflare and infrastructure providers may process technical data, including IP addresses, according to their roles and policies, for delivery, security and abuse protection.
Retention
Uploaded files, processed results and ZIP archives are retained temporarily according to the technical TTLs mentioned above.
Security and technical logs are retained only as long as necessary for security, diagnostics and abuse prevention, according to the log rotation/retention policies configured on the server.
Your rights
You may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent under GDPR.
For GDPR requests, use https://cloudvertor.com/contact?department=privacy and select the privacy policy department. We respond within the applicable legal timeframe, usually within 30 days.
You may lodge a complaint with the competent supervisory authority if you believe that data processing infringes applicable law.