Privacy Policy
Last updated
This policy explains what information Adikya collects when you visit adikya.com or use its tools, why, who else handles it, how long it's kept, and the choices you have. We collect as little as we can: most tools run entirely in your browser, you don't need an account, and we never sell your personal information or share it for cross-context behavioral advertising.
Adikya is run by an individual, not a company. "Adikya", "we", "our", and "us" refer to that operator, who decides how your information is used (the "data controller") for adikya.com and its subdomains (such as go.adikya.com). Questions about this policy or requests regarding your personal information can be sent to support@adikya.com.
The short version
- Tools that run in your browser never send what you type or open to us.
- Tools that need a server use your input only to return a result. Uploaded files are deleted once they've been processed. A few lookups are cached for a limited time, as listed below.
- Our visitor statistics don't use cookies and don't store your IP address.
- If you create an account, we keep your email address and what you choose to save. You can download or delete it at any time from your account page.
- If you play games while signed in, your best scores appear on public leaderboards unless you opt out.
- We only use essential cookies. If we ever show ads from third-party ad networks, they stay off until you allow them.
Information we collect
When you visit any page
- Server logs. Like almost every website, our web servers record each request: your IP address, the page requested (without its query string), date and time, browser user agent, referring page, and the country Cloudflare reports. Requests to our visitor statistics service are not logged. We use these logs to keep the site running, fix errors, and stop abuse, and we delete them after 14 days.
- Visitor statistics. We count visits with our own cookieless analytics service (Beacon). For each page view it records the page path (without any query string), the referring site and page, any campaign tags in the link (utm_source, utm_medium, utm_campaign), your browser name, device type, and country (supplied by our network provider). Instead of storing your IP address, it stores a one-way code calculated from your IP address, browser and the date. The code changes every day, so we can count daily visitors but can't follow you from one day to the next. Beacon doesn't set cookies, and it records nothing when your browser sends a Do Not Track or Global Privacy Control signal. We delete this data after 13 months.
- Performance measurement. Cloudflare adds its Web Analytics script to our pages. It measures page load performance without cookies.
- Security and delivery. All traffic passes through Cloudflare, which protects the site from attacks and delivers it quickly. Cloudflare processes your IP address and request details as our security and CDN provider.
When you use a tool
- Browser-only tools. Formatters, converters, calculators, generators, and many PDF and image tools do their work entirely in your browser using client-side JavaScript or WebAssembly. What you enter stays on your device.
- Server-side tools. Some tools must run on our server, such as DNS, WHOIS, SSL, and HTTP checkers, and file conversions (for example PDF compression, merging, locking and unlocking, Office and PDF conversions, and some image conversions). We use what you submit only to produce the result. Uploaded files are processed in memory or in a temporary folder and deleted as soon as processing ends. If a server process stops unexpectedly mid-request, any temporary files it left behind are deleted automatically within two hours.
- Short-lived caches. To stay fast and within third-party rate limits, some lookups cache their result for between 30 seconds and 24 hours. These caches are keyed by what was looked up, like a domain name or a location. The one exception is What's My IP, which caches the details of your own IP address for up to an hour.
- Webhook Request Bin. This developer tool exists specifically to capture HTTP requests. It keeps up to 50 requests sent to your bin, including their method, headers (excluding cookies and internal proxy headers), body, and sender IP address, for 30 minutes, then permanently deletes them.
- Poll Maker. A poll you create, its options, and its votes are stored until the poll is deleted, and can be accessed by anyone with its link. It is hidden from search engines. When someone votes, their browser receives a random token in a cookie (see below); we store only a one-way cryptographic hash of that token, never an IP address, to prevent duplicate voting from the same browser. On a poll with anonymous voting turned off, the name a voter types is stored and shown publicly on that poll. If you create a poll while signed in, it is linked to your account. Deleting a poll, or the account that created it, deletes the poll and all of its votes.
- Survey Maker. A survey you create, its questions, and every response to it are stored until the survey is deleted. The survey can be reached by anyone who has its link and is hidden from search engines, but responses are shown only to the survey creator. When someone responds, their browser receives a random token in a cookie; we store only a one-way hash of that token, never an IP address, to prevent duplicate submissions. On a survey with anonymous responses turned off, the name a respondent types is stored and shown only to the creator (including in CSV exports). Deleting a survey, or the account that created it, removes the survey and all of its responses.
- Abuse prevention. We count requests per IP address to enforce rate limits and decide when to show a captcha. The counters expire automatically, typically within an hour. Sign-up and sign-in forms, and selected tools, use Cloudflare Turnstile to check that requests come from a person and not an automated bot; Turnstile receives your IP address for that check.
- Third-party lookups. A few tools send part of your input to an outside service to get the answer. They are listed under Who we share information with.
If you create an account
- Account details. Your email address and password, the optional full name and public display name you set, when your account was created, and which version of our Terms of Service and this policy you accepted at sign-up, and when. Your password is checked and held by our identity provider, Amazon Cognito. It passes through our server when you sign in, but we never store it.
- Two-step verification. If you turn it on, Amazon Cognito holds the authenticator secret and checks your codes. We don't keep a copy of the secret.
- Things you save. Notes, lists, and tasks you choose to sync to your account; reminders, which are stored on our server so they can be delivered even when the page is closed; the tools and games you add to your favorites; and workflows you save (the steps and configuration only, never the text you run them on, and never passphrases or private keys).
- Reminder notifications. If you turn on notifications in a browser, we store the Web Push subscription details that browser provides, so we can deliver your reminders through its push service. The reminder's title and notes are encrypted before they're sent, so the push service can't read them. You can turn notifications off on the Reminders page or disconnect a device on your account page.
- Sessions. When you sign in, we set an HTTP-only session cookie and keep a matching session record, which expires after 30 days or when you sign out.
If you play games while signed in
- Leaderboards. When you finish a leaderboard game while signed in, we store your best score for each game, both all-time and for weekly seasons, when you achieved it, and your earned season points. Leaderboards are public. They show your display name, or your full name if no display name is set, or "Player" followed by a short code if neither is provided. They never reveal your email address. Participation is enabled by default; you can leave leaderboards, change your display name, or clear your scores from your account page.
- Score checks. To check that submitted scores are genuine, we keep a record of each scored round (the game, score, number of moves and duration, and the full move list for rounds flagged or rejected by those checks) for 90 days.
- Server-checked games. For selected games, such as Minesweeper, our server temporarily holds the random board state of the round you are playing to verify submitted scores. It is deleted when the round concludes or after 3 hours.
Security monitoring
If an IP address attacks our infrastructure (for example repeated brute-force sign-in attempts, directory scanning, or vulnerability probes), our automated intrusion protection may check the IP address against abuse-reputation services (AbuseIPDB, CrowdSec, and Spamhaus), block it at Cloudflare, and keep a security record of the check and the decision. These records are deleted after 13 months. Security alerts sent to the operator contain counts only, never IP addresses.
When you contact us
If you email us, we receive your email address and any content you provide, and use it only to respond to your inquiry. Email to our addresses is received and stored by Amazon Web Services. We keep a conversation for 12 months after its last message, or less if we delete it sooner. Deleted messages are removed permanently after a further 30 days.
Cookies and local storage
We only use cookies and browser storage that the site needs to work, keep votes fair, or remember your preferences. We don't use advertising or cross-site tracking cookies. If we show ads from third-party ad networks in the future, they will stay off until you allow them in , which you can change at any time from the site footer. Our cookieless visitor statistics and our own tool promotions don't depend on that setting.
| Name | Type | Purpose | Duration |
|---|---|---|---|
session | Cookie, essential | Keeps you signed in. Set only when you sign in. | 30 days, or until you sign out |
login_totp | Cookie, essential | Links the two steps of signing in with an authenticator app. Set only during that sign-in. | 3 minutes |
auth_email | Cookie, essential | Pre-fills your email address on the next step of signing up, signing in, or resetting your password, so it doesn't have to appear in the page address. | 1 hour, or until that step is done |
poll_voter | Cookie, essential | Prevents duplicate voting in single-vote polls requested by creators. Contains an anonymous random token. Only set when you vote. | 1 year (or until cleared) |
survey_respondent | Cookie, essential | Prevents duplicate submissions in single-response surveys requested by creators. Contains an anonymous random token. Only set when you respond. | 1 year (or until cleared) |
pw_… (go.adikya.com) | Cookie, essential | Remembers that you unlocked a password-protected short link. | 1 hour |
Cloudflare cookies (e.g. cf_clearance) | Cookie, essential | Set by Cloudflare only if it needs to challenge your browser to tell a person from a bot. | Up to 30 minutes; see Cloudflare's policy |
adikya_consent | Local storage, essential | Stores your choice about third-party advertising. | Until site data is cleared |
adikya-theme | Local storage, preference | Stores your light or dark mode visual preference. | Until site data is cleared |
adikya-favorites | Local storage, functional | Remembers favorite tools and games before you sign in. Synced to your account when you sign in. | Until sign-in, removal, or data cleared |
adikya-workflows | Local storage, functional | Stores workflow definitions on your device before you sign in. Synced to your account when you sign in. | Until sign-in, deletion, or data cleared |
adikya-workflow-draft | Session storage, functional | Keeps an in-progress workflow draft while you sign in. | Until the draft is restored or the tab is closed |
adikya-poll-manage:… | Local storage, functional | Lets the browser that created a poll without an account manage, close, or delete it later. | Until poll deleted or data cleared |
adikya-survey-manage:… | Local storage, functional | Lets the browser that created a survey without an account view its results, edit, or delete it later. | Until survey deleted or data cleared |
| Tool data (notes, lists, tasks, invoice drafts, world clock zones, and their pending-sync markers) | Local storage, functional | Keeps client-side tool inputs on your device between visits. | Until deleted or site data cleared |
| Game and tool preferences (saved games and best scores, astrology tool settings) | Local storage, functional | Remembers game progress and display settings on your device. | Until site data is cleared |
How and why we use information
Where data protection law (such as the GDPR) requires a legal basis for processing personal data, we rely on the following bases:
- Performance of a contract (Art. 6(1)(b) GDPR): Running tools you use, maintaining your account, storing and syncing the data you save, and keeping your reminders.
- Legitimate interests (Art. 6(1)(f) GDPR): Protecting Adikya from fraud, automated attacks, and security vulnerabilities; keeping the site running; and understanding overall usage through cookieless statistics. We balance these interests against your rights by collecting as little as we can and deleting it on the schedule below. You have the right to object to processing based on legitimate interests.
- Consent (Art. 6(1)(a) GDPR): Sending push notifications to a browser where you turned them on, and third-party advertising if we introduce it. You can withdraw consent at any time.
- Compliance with legal obligations (Art. 6(1)(c) GDPR): Responding to lawful court orders or other legal requirements.
We do not make decisions based solely on automated processing or profiling that produce legal or similarly significant effects on you.
Who we share information with
We do not sell, rent, or trade your personal information. We do not share your information for cross-context behavioral advertising. We share information only with service providers that help us run Adikya, when a tool you use needs an outside service, or when required by law.
| Provider | What it receives | Why |
|---|---|---|
| Contabo GmbH | Everything stored on our servers | Hosting the site, its databases, and its logs |
| Cloudflare, Inc. | All site web requests, including IP address and request metadata; IP addresses we block | Security, content delivery (CDN), DNS, Turnstile bot checks, cookieless performance measurement, and blocking attacking IP addresses |
| Amazon Web Services (Cognito, SES, S3, SQS, SNS, Lambda) | Account email address, password, and two-step verification codes; email you send us; domain names checked with the DNS propagation tool; encrypted database backups | Sign-in and account emails; receiving and storing email; checking DNS from several regions; off-site backups |
| Browser push services (Google, Mozilla, Apple, Microsoft) | Encrypted reminder notifications and the subscription address of your browser | Delivering reminders to your browser |
| Have I Been Pwned | Email address entered into the breach checker | Checking whether an email appears in known data breaches |
| ipwho.is | The IP address you look up, or your own IP address when you use What's My IP | IP location, network, and carrier lookup |
| Domain and network registries (IANA and the registries' RDAP servers, Team Cymru) | Domain names and IP addresses you look up | WHOIS/RDAP and IP network (ASN) lookups |
| DNS blocklist and resolver operators (Spamhaus, Barracuda, SpamCop, SORBS; Google, Cloudflare, Quad9, OpenDNS public DNS) | Domain names and IP addresses you check | Blacklist, DNS, DNSSEC, and propagation checks |
| Other public data services (MAC Vendors, NHTSA vPIC, OpenStreetMap Nominatim, Prokerala) | The specific query (MAC prefix, vehicle VIN, location, or birth date, time and place) | Hardware MAC lookup, VIN decoding, geocoding, and astrological calculations |
| Google Safe Browsing | Destination URLs submitted to the URL shortener | Screening links for malware and phishing |
| AbuseIPDB, CrowdSec | IP addresses that attacked our infrastructure | Checking their abuse reputation |
Server-side checkers also connect directly to the websites, hostnames, and mail servers you ask them to test, the same way a browser or mail client would. We may also disclose information where required by law, to protect someone's life or safety, or if Adikya is transferred to another operator who agrees to honor this policy.
Where information is processed
Our servers and databases are hosted by Contabo in France (European Union), and our encrypted database backups are stored with Amazon Web Services in Paris. Some processing happens outside the EU:
- Account sign-in (Amazon Cognito), account emails, and email you send us are handled by Amazon Web Services in the United States.
- Cloudflare and browser push services operate worldwide, and the DNS propagation tool checks domains from several Amazon Web Services regions.
Where personal data from the European Economic Area, the United Kingdom, or Switzerland is transferred to another country, we rely on the safeguards in our providers' data processing terms, including the Standard Contractual Clauses adopted by the European Commission and, where a provider is certified, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
How long we keep information
| Information | Kept for |
|---|---|
| Server access and error logs | 14 days |
| Uploaded files and server-processed inputs | Deleted as soon as processing ends; leftovers from an interrupted request within two hours |
| Lookup caches | 30 seconds to 24 hours, depending on the tool |
| Webhook Request Bin captures | 30 minutes (maximum 50 requests per bin) |
| Rate-limit counters | Typically up to 1 hour |
| Session records | 30 days, or until you sign out |
| Account profile, saved notes, lists, tasks, reminders (including sent ones), favorites, and workflows | Until you delete them or delete your account |
| Leaderboard scores and season points | Until you clear them or delete your account |
| Score-check records of game rounds | 90 days |
| Server-checked game rounds | Until the round ends, or up to 3 hours |
| Reminder notifications not yet delivered by a push service | Up to 24 hours |
| Visitor statistics (Beacon) | 13 months |
| Short-link click totals and our own ad display counts | Indefinitely; these are daily totals and contain no personal information |
| Security records of attacking IP addresses | 13 months |
| Emails you send us | 12 months after the conversation's last message; deleted messages are removed after a further 30 days |
| Database backups | Removed within 15 days |
Your choices and rights
Wherever you live, you can do the following:
- Download your data: Download a machine-readable copy (JSON) of your account data from your account page at any time. Responses to a survey you created are downloaded as CSV from that survey's results page.
- Delete your data: Delete your account from your account page. This immediately removes your account from Amazon Cognito and deletes your profile and everything saved to it (notes, lists, tasks, reminders, push subscriptions, polls, surveys, favorites, workflows, and game data) from our database. Copies remain only in database backups, for up to 15 days, in server logs, for up to 14 days, and briefly in short-lived caches. Votes and survey responses you submitted to other people's polls and surveys aren't linked to your account, so they stay with those polls and surveys. Emails you sent us are kept as described above.
- Correct your data: Update your name, display name, and saved items from your account page, or contact us to change your registered email address.
- Third-party advertising: Change your choice at any time in in the footer.
- Push notifications: Turn them off on the Reminders page, disconnect a device on your account page, or remove the permission in your browser's site settings.
- Other requests: To request access, restriction, or objection, or anything the self-service tools don't cover, email support@adikya.com. We will verify your identity and respond within 30 days (or any shorter period your local law requires).
We will never discriminate against you for exercising any of your privacy rights. If you believe your data has been handled in violation of applicable law, please contact us first so we can address your concern. You also have the right to complain to your data protection authority (such as the CNIL in France, the ICO in the UK, or the regulator where you live).
Additional disclosures for US residents (California & other states)
This section applies to residents of California (under the California Consumer Privacy Act, as amended by the CPRA) and other states with comprehensive consumer privacy laws (including Colorado, Connecticut, and Virginia):
- Categories of Personal Information Collected (Past 12 Months):
- Identifiers: IP address, browser user agent, email address (for registered accounts), and random anonymous cookie tokens.
- Internet or Electronic Network Activity: Pages visited, referring pages, and tool usage.
- Geolocation Data: Approximate country, inferred from IP addresses.
- Account content: Notes, lists, tasks, reminders, favorites, workflows, polls, surveys, and game scores you choose to save.
- No Sale or Sharing: We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.
- Sensitive Personal Information: We do not collect or process sensitive personal information for the purpose of inferring characteristics about individuals.
- Authorized Agents: You may designate an authorized agent to submit a privacy request on your behalf. We may require proof of written authorization and direct verification of your identity.
- Right to Appeal: If we decline to take action on your request, you can appeal by emailing support@adikya.com. If your appeal is denied, you may contact your state Attorney General.
How we protect information
We protect information with encrypted connections (HTTPS with TLS 1.2 or newer), a strict Content Security Policy that blocks unauthorized scripts, parameterized database queries, temporary storage for uploaded files that is cleared after each request, rate limiting, encrypted off-site backups, optional two-step verification, and passwords managed by Amazon Cognito. If a security incident affects your data, we will notify affected individuals and authorities as required by applicable law.
Children's privacy
Anyone can use Adikya's tools and games without an account. Accounts are only for people aged 18 or older, and you confirm your age when you sign up. If you believe someone under 18 has created an account or given us personal information, tell us at support@adikya.com and we will delete it.
Changes to this policy
We may update this policy as Adikya and the law change. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will show a prominent notice on the site before they take effect.
Contact
For questions about this privacy policy or to exercise your rights, email support@adikya.com.