Privacy policy

This policy describes how Refentra ("we", "the site") handles data. It was last updated on 2026-10-05 and may be updated as the site changes; material changes will be reflected in the date above.

What stays on your device
Your device (this browser)
  1. Choose an image
  2. Processed in the browser
  3. Download the result
Website host

Explicit public network queries

The five live DNS, DNSSEC, IP registry/routing and TLS tools send your chosen public domain/IP to Refentra API and the named providers only after your informed, explicit action. File processing and saving reports stay in your browser; these queries do not upload files.

Refentra Edge sends the domain/IP to the displayed services only on Run. Providers receive the edge address; no visitor-IP/ECS forwarding. Google temporary logs24–48h (abuse exceptions), Cloudflare limited logs≤25h plus published sampled/aggregate exceptions. Registry/RIPE policies also apply. No zero-retention promise.

The operational quota database stores only a global day/budget and lease, without targets or visitor identifiers. Optional usage receives only fixed tool/action categories, never targets. Providers may process requests under their own policies; activation and availability are separate from source registration.

On this page

Who operates Refentra

Refentra is operated by Marco Ryszka. Privacy questions, requests, and complaints can be sent to ryszka.marco@gmail.com.

Your files never leave your device

All image processing — converting, resizing, compressing, cropping, and metadata editing or removal — runs locally in your browser. Your image files are never transmitted to Refentra or to any third party, are not stored on a server, and are released from memory when you close or reset a tool. Because of this, we cannot recover files or results on your behalf.

What the site does process

  • Hosting: This version of the site is served by Cloudflare. As with any web server, requests are processed by the hosting infrastructure for delivery, security, and abuse prevention. This includes technical data such as IP addresses and request metadata handled under the hosting provider's data processing terms. These network requests do not contain your image files.
  • Optional usage counts: off until you accept in the new measurement banner. Declining does not restrict any tool; you can withdraw in the footer. One anonymous counter records only whether the notice was shown, allowed, declined or withdrawn.
  • External analytics: Cloudflare Web Analytics runs on the public site without your consent and is separate from the optional measurement. Google Analytics, Vercel Web Analytics and Speed Insights are disabled.
  • No accounts: Refentra has no registration, so there are no user profiles or account data.
  • Advertising defaults off: Refentra does not load Google advertising code unless the static production build is explicitly enabled for advertising. All tools remain available without consenting to ads.

Optional Google advertising

On an advertising-enabled build of the canonical Refentra site, the browser loads the Google AdSense tag with ad requests paused. The tag deploys Google's certified consent message. The required initial Google CMP requests process technical network data, such as your IP address, browser, and device information, so that the message can collect your choice. While requests are paused, Google states that its scripts may read existing Google-domain cookies but set no new cookies and do not use data associated with existing cookies for ad serving or measurement. These requests do not authorize ads. Refentra does not send your image files, filenames, or image metadata through this advertising integration.

Ad requests start paused. They resume only after the consent framework reports explicit consent for Google and the required storage purpose. Google's message controls the more detailed purpose and partner choices and applies any stricter requirements. You can withhold consent and continue using every tool without ads.

Google and its advertising partners may use cookies or similar browser storage only as allowed by the choices and rules applied through the consent message. Use "Change advertising choices" in the footer to reopen Google's consent message. Ad requests are paused before the message is reopened and remain paused when a choice is rejected, withdrawn, unavailable, or cannot be read.

See Google's privacy policy for Google's handling of data.

Cloudflare Web Analytics (without consent)

On the public refentra.com site we use Cloudflare Web Analytics to understand overall reach and page speed. Your browser loads a script from static.cloudflareinsights.com and sends aggregate page-view and performance data to Cloudflare: page path, referrer, browser, operating system and device class, country derived from the connection, and page load timings. According to Cloudflare, this service sets no cookies, uses no browser storage and does not track individuals across sites or build visitor profiles. Refentra passes no files, file data, filenames or entered values to it, and your files never leave your device. The legal basis is our legitimate interest in running and improving a fast, reliable website (Article 6(1)(f) GDPR). You can object at any time with effect for the future through our contact page, or block static.cloudflareinsights.com in your browser; the tools keep working. Branch previews do not load it.

Optional aggregate usage measurement

To improve Refentra, we ask for fresh consent in a banner with separate allow and decline buttons. Earlier consent preferences are not reused for this version. Optional collection is based on your consent under Article 6(1)(a) GDPR. All tools work without it; it does not authorize advertising.

After consent, same-site requests contain only fixed categories: known page and tool, action (such as input accepted or rejected, start, outcome, cancellation, help or download request), selected function, time bucket, broad device category based on window width, language, referral source, campaign and entry page. Time buckets describe visible page time, time to first start, processing duration or time from result to download request. Unknown sources or pages are grouped into fallback categories; no raw path is stored.

After consent, the same fixed categories also include, for each tool run: a failure type (for example unsupported format, file too large for the browser, unreadable file, missing browser feature, timeout or unknown), a coarse input size class (for example under 100 KB or 1–5 MB), a file format family (for example JPEG or PDF), a savings class comparing the result with the input size (for example larger or more than 50% saved), a processing-time range and the time from selecting a file to starting. They are derived locally and only the class is sent: never the file, its name, its exact size, pixels, metadata or entered values. Nothing in them identifies you; they are stored as daily totals under the same 90-day rule.

Measurement sends no files, exact file properties, filenames, content, pixels, metadata values, entered values or full page or referral URLs. Only on/off consent preferences are saved in localStorage; older preferences are disabled. Measurement uses no cookies, visitor, session or job identifiers, session replay or fingerprinting. Referral context stays in this tab's memory during navigation; it is not added to internal links.

Cloudflare necessarily processes IP addresses and technical network data to deliver and secure these requests. Refentra's Cloudflare D1 counter database is located in the European Union and stores daily totals by these categories, separately for preview and production. It stores no IP addresses, user agents or individual event timestamps. Recognizable automated user agents are rejected without storing them, but this check is incomplete and spoofable. Counts do not verify unique humans, sessions, conversions or saved files: a download request records an action, not a confirmed file save.

The retention rule keeps 90 UTC calendar dates, including the current day. Older totals are deleted when a new accepted collection request arrives. Without new accepted requests, older totals may remain until collection resumes. Existing V1/V2 aggregate totals remain separate from the new V3 categories under the same rule.

Change or withdraw your choice at any time in the footer. Withdrawal stops new measurement requests, clears the tab's measurement context and applies to other open tabs of this site through browser storage updates when storage is available. Activity before consent is never replayed later. Already aggregated totals cannot be linked to you or selectively removed for a particular visitor. Withdrawal does not change the separate advertising choice.

Anonymous notice counter (without consent): To learn whether this measurement notice is understandable, the site counts four events even before you choose: notice shown, allowed, declined and later withdrawn. Each is one request containing only that event type and your page language; it is counted into a daily total. No device information (such as window width) is read for it. It contains no identifier, no cookie is set, nothing is stored on your device for it, and no IP address, user agent or individual event timestamp is stored (only the day of the daily total); it cannot be linked to you or to other measurements. Nothing else from this optional measurement is sent before you allow it; Cloudflare Web Analytics is separate (see above). The legal basis is our legitimate interest in checking that the consent notice works (Article 6(1)(f) GDPR). You can object through our contact page or block requests to /api/usage; all tools keep working.

Cloudflare's privacy policy

Loading files from a link or cloud storage

Tools with a file intake also let you load a file from a link (https) or, where offered, from Google Drive, OneDrive or Dropbox. Nothing is contacted until you choose one of these options. Your browser then downloads the file directly from that address or provider into this tab, and processing continues locally as with a file from your device. The file is not sent to Refentra, and Refentra stores no sign-in token: the provider's short-lived access permission stays in your browser tab and ends when you close it.

Choosing a cloud provider loads that provider's sign-in and file-picker code from its own servers. The provider then processes your sign-in and the files you pick under its own privacy policy: Google, Microsoft, Dropbox. Google Drive access is limited to the files you pick in its dialog. While the Google dialog is open, and when a public Google Drive link is read, Google also receives the address of this site (refentra.com) but not which page you are on. Any other pasted link is fetched without cookies and without telling the other server which Refentra page you came from; that server still sees your IP address like any web request.

Contact

For privacy questions or deletion concerns, note that we hold no copies of your files, so there is nothing to delete on our side. Everything else: ryszka.marco@gmail.com.