Privacy policy

Scope and controller

This notice covers the public Hubio.Tools website, its free tools, encrypted sharing and communication with us. The controller is Hubio, s. r. o., Duklianska 2709/58, 052 01 Spišská Nová Ves, Slovakia, company ID 55966918, contact info@hubio.sk. Registered in the Commercial Register of the Municipal Court Košice, section Sro, file 58558/V. Paid hosting, accounts and other SaaS services require supplementary information reflecting their actual operation.

Data, purposes and legal bases

Visits and security. Connections involve your IP address, time, requested address and technical connection and browser information. Sessions support form security and language preferences. Operational and error records help resolve faults and abuse. Security processing relies on legitimate interests under Article 6(1)(f) GDPR; data necessary to perform a service contracted by the data subject relies on Article 6(1)(b).

Local tools. Content tools such as JSON, passwords, conversions, images and PDF process input in your browser. The application does not intentionally send that content to our server for processing. This does not exclude technical requests made when visiting the page.

Network checks. DNS, WHOIS/RDAP, SSL, HTTP, email DNS checks and IP information use our server and public services or the target server. Submitted domains, IP addresses, URLs and selectors are used to fulfil your request. A public IP may be sent for RDAP lookup. We do not create a separate check history; requests may nevertheless appear in external services' records and, on failure, our error records. Do not put passwords or secret tokens in URLs.

Encrypted sharing. Messages, files and filenames are encrypted in your browser with AES-256-GCM. We store ciphertext, a random identifier, size, expiry and remaining opens to deliver your requested share. The key is in the link fragment after #; the application does not send it to our server. Encryption does not automatically make personal data anonymous. Anyone obtaining the complete link may access it.

Turnstile. Cloudflare Turnstile protects share creation. Cloudflare processes technical signals such as IP and connection information; our server verifies the token and IP. Our basis is a legitimate security interest. Cloudflare acts as a processor when providing protection and, under its own rules, also as a separate controller when improving detection. Cloudflare information.

Communication. Your contact details and message are used to answer questions or enquiries. Depending on the context, the basis is pre-contractual steps, contract performance or a legitimate communication interest. We have no analytics, advertising pixels or newsletter; contacts are not automatically added to a future newsletter.

Retention

• Shares last 15 minutes, 1 hour, 24 hours or 7 days and allow 1, 2, 5, 10 or 20 opens. The last permitted fetch deletes the active record. Expiry blocks access; cleanup is scheduled every 5 minutes, but outages may delay physical removal.
• Hosting operational and error logs are retained for 7 days.
• Hosting file and database backups are retained for 14 days. Active-record deletion may not immediately remove a backup copy. Restoration must respect expiry and previous deletions.
• Sessions are valid for 120 minutes, renewed through activity; validity does not itself prove physical removal of server records. Appearance preferences remain in your browser until changed or deleted.
• Communications are retained to handle the matter and necessary follow-up; contractual or disputed matters are subject to relevant legal obligations and claim protection.

Recipients and transfers

Hubio.Tools is operated by Hubio, s. r. o. Our supplier WebCreators, s.r.o. (HostCreators) provides the underlying server infrastructure, Československej armády 24, 974 01 Banská Bystrica, company ID 45329702. The operator confirms the servers are in a VNET data centre in Bratislava, Slovakia. Authorised Hubio staff and hosting, communication and security providers may process necessary data. Network checks involve the relevant DNS/RDAP service or target server. External social services open through links and apply their own rules.

Cloudflare and other external services may process data outside the EEA. Cloudflare publicly refers to the Data Privacy Framework and standard contractual clauses in its DPA.

Rights and contact

Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability, object to legitimate-interest processing and withdraw consent where applicable. See GDPR and your rights. Contact info@hubio.sk; complaints may be made to the Slovak supervisory authority or another competent authority. Technical data is needed for functionality; a new share cannot be created without successful security verification. Turnstile automatically evaluates security signals and is not used by us for advertising profiling.