x70

Legal

Privacy Policy

Last updated: 2026-07-18. This Privacy Policy explains how Daniel Ensminger, trading as x70 (“we”, “us”, “our”), processes personal data when you use https://tools.x70.one, in line with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).

1. Local processing first

x70 Tools is designed so your tool inputs stay on your device. Formatters, converters, generators, image tools, and PDF utilities run in your browser using client-side JavaScript and Web APIs. We do not upload, receive, store, or inspect the text, files, images, PDFs, secrets, or other content you paste or select for a tool.

In particular:

  • Tool inputs and outputs are processed in memory (and, where needed, temporary browser storage) on your device only.
  • We do not operate a server-side pipeline that receives your tool payloads for conversion or analysis.
  • Theme preference may be stored locally in your browser and is not used for tracking.

If that model ever changes for a specific tool, we will state it clearly in the tool UI and update this policy.

2. Controller

The controller responsible for processing is:

Daniel Ensminger
x70
Altheimer Eck 15
80331 München
Germany
Email: contact@x70.one

See also our Imprint (Impressum).

3. What may leave your device

Using the website still involves ordinary web requests that are separate from tool content:

  • Page and asset requests: when you load https://tools.x70.one, your browser requests HTML, CSS, scripts, and images from our host and, where configured, the Brand CDN (design.x70.one). Those requests typically include technical data such as IP address, user agent, referrer, and requested URL.
  • Status badge: the footer may request uptime status from our status provider. That request does not include tool inputs.
  • Optional analytics: this site does not currently load PostHog, Vercel Analytics, OpenPanel, or similar non-essential analytics. If we add them later, they will run only after you consent via a cookie banner (Art. 6(1)(a) GDPR), and tool inputs will still not be sent as analytics content.
  • Email contact: if you email us, we process the content of that correspondence.

4. Categories of personal data

Depending on how you interact with us, we may process:

  • Technical / hosting data: IP address, browser and device information, requested paths, timestamps, and similar server or CDN logs generated when you load the site.
  • Communications: emails you send to contact@x70.one.
  • Consent preference (if a cookie banner is active): whether you allowed optional analytics, stored locally on your device.

We do not create accounts on this site, and we do not process payment or newsletter subscription data here.

5. Purposes and legal bases

  • Providing the website and tools (Art. 6(1)(b) GDPR where applicable to requested service delivery; Art. 6(1)(f) — legitimate interest in operating a free public utility site).
  • Security, abuse prevention, and reliability including hosting logs (Art. 6(1)(f) GDPR).
  • Responding to inquiries you send by email (Art. 6(1)(b) or Art. 6(1)(f) GDPR).
  • Optional analytics, only if enabled and only with consent (Art. 6(1)(a) GDPR).
  • Legal obligations where we must retain or disclose information (Art. 6(1)(c) GDPR).

6. Cookies and similar technologies

We may use strictly necessary storage for preferences such as theme. Optional analytics cookies or similar technologies are not active on this site today. If they are introduced, they will require your prior consent, and you will be able to change that choice later.

7. Recipients and processors

We use carefully selected providers who process technical data on our behalf under Art. 28 GDPR agreements where applicable:

  • Vercel Inc. — website hosting and edge delivery
  • Better Stack — public status information shown in the footer (where configured)

We do not sell your personal data. We share data only with processors needed to operate the service, or where required by law.

8. International transfers

Some providers are based in the United States or other countries outside the EEA. Where transfers occur, we rely on appropriate safeguards such as the EU–US Data Privacy Framework (where the provider is certified) and/or Standard Contractual Clauses (SCCs), plus supplementary measures as required.

9. Retention

  • Tool inputs: not retained by us; they remain under your browser’s control until you clear them.
  • Hosting / security logs: for short periods needed for security and troubleshooting, unless a longer period is needed to investigate an incident.
  • Email correspondence: for as long as needed to handle your request and related legal claims.

10. Your rights

Under the GDPR you may have the right to:

  • Access your personal data (Art. 15)
  • Rectification (Art. 16)
  • Erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interests (Art. 21)
  • Withdraw consent at any time without affecting the lawfulness of processing before withdrawal (Art. 7(3))
  • Lodge a complaint with a supervisory authority (Art. 77), in particular Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), or the authority where you live or work

To exercise these rights, email contact@x70.one.

11. No automated decision-making

We do not use personal data for automated decision-making producing legal or similarly significant effects under Art. 22 GDPR.

12. Children

This site is a general-purpose utility. We do not knowingly collect personal data from children under 16 beyond ordinary hosting logs generated by visiting any website.

13. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do.

14. Contact

Questions about privacy: contact@x70.one. Related documents: Terms of Service and Imprint.