Privacy Policy

Last updated: August 1, 2026

This policy explains how hdhead.com (“we,” “us”) collects and handles your personal data when you use our website and tools. We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

What we collect

Files you upload. When you use our tools, you upload plain text files for processing. We process these files and make the results available to you for download.

Contact form. When you contact us, we collect your name, email address, and the content of your message.

Technical data. Our servers may automatically log basic technical information such as IP address and request timestamps for security and to keep the service running.

How we use your data and our legal basis

We process your data only for the purposes below, each with its GDPR legal basis:

  • Processing your uploaded files to provide the processing service you requested — performance of a contract (Art. 6(1)(b)).
  • Responding to your contact message — legitimate interest in answering inquiries (Art. 6(1)(f)), or performance of a contract where your message concerns our services.
  • Server logs and basic security — legitimate interest (Art. 6(1)(f)) in keeping the service secure and reliable.

We do not sell your data, share it for marketing, use it to build profiles, or use automated decision-making that produces legal effects.

How long we keep your data

Uploaded and processed files are stored for 30 days, after which they are automatically deleted.

Contact form submissions are kept only as long as needed to handle your inquiry and any reasonable follow-up, then deleted.

Server logs are kept for a short period for security purposes, then deleted.

Who has access to your data

Your data is accessible only to us and in limited circumstances to the service providers that host our infrastructure. These providers act on our instructions under agreements that require them to protect your data. We list our main providers on request.

If any provider stores data outside the European Economic Area (EEA), such transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Security

We use reasonable technical and organizational measures to protect your data during upload, processing, storage, and download. However, no method of internet transmission or storage is completely secure, so we cannot guarantee absolute security.

Cookies

We use only essential cookies required for the site to function. We use traffic analytics.

Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to certain processing
  • Data portability — receive your data in a portable format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority.

Children

Our services are not directed at children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the current version.

Contact

For any questions about this policy or your data, contact us using the contact page.