PRIVACY POLICY

1. Data Controller (GDPR Art. 13 & LSSI-CE Art. 10)

The data controller responsible for operating kaijuconverter.com is Pablo Cirre Gómez, with registered professional address at Calle Trajano nº 8, Local B, 18002 Granada, España (Spain). You can reach the Data Controller directly via email at hello@kaijuconverter.com, via our Support & Privacy Contact Form, or through centraldecomunicacion.es.

2. What Data We Process & How Files Are Handled

We adhere strictly to the principle of data minimization (GDPR Art. 5(1)(c)):

• Client-Side In-Browser Conversions (Zero Server Upload): Eligible image and text conversions executed via HTML5 Canvas / WebAssembly run 100% locally inside your web browser (`0 bytes` transmitted to our servers).
• Server-Side Isolated Conversions: Uploaded source files (`storage/app/private/uploads`) are automatically deleted within 30 minutes. Converted output files (`storage/app/private/outputs`) are automatically deleted within 60 minutes for guests or 24 hours for registered users.
• 1-Click Immediate File Shredding (0 Seconds): Immediately after converting a file, you can click the delete button (`DELETE /convert/{jobId}`) to permanently unlink both the source upload and converted output in real time.
• IP Addresses & Security Logs: Processed temporarily for rate limiting (`throttle`), DDoS protection, and abuse prevention under legitimate interest (GDPR Art. 6(1)(f)).
• Payment & Billing Data (Stripe): Purchases of the 24-Hour Day Pass (€4.99) and Pro subscriptions (€3–€29/month) are processed directly by Stripe Payments Europe, Limited (PCI-DSS Level 1 certified). KaijuConverter never stores your card numbers.

3. Advertising, Google AdSense & Google Consent Mode v2 Disclosures

To keep our core file conversion tools free for everyone, we display advertisements served by Google AdSense (`ca-pub-5070758158276189`) on free-tier pages (paid subscribers and active 24h Day Pass users enjoy an ad-free experience). In compliance with Google's EU User Consent Policy and GDPR:

• Third-party vendors, including Google (`Google Ireland Limited`), use cookies (`__gads`, `__gpi`, `IDE`) to serve ads based on a user's prior visits to kaijuconverter.com or other websites.
• Default Denial via Google Consent Mode v2: On your first visit, `ad_storage`, `ad_user_data`, `ad_personalization`, and `analytics_storage` are set to `denied` by default until you explicitly click "Accept".
• How to Opt Out of Personalized Ads: Users may opt out at any time by visiting Google Ads Settings, www.aboutads.info/choices/, or via Cookie Preferences in our footer. Review Google's disclosure: How Google uses information from sites or apps that use our services.

4. Analytics: Google Analytics 4 & Microsoft Clarity

Only when you grant explicit consent (`cookie_consent = accepted`), we use Google Analytics 4 (`G-LM6KNL63MH`) for anonymized traffic metrics and Microsoft Clarity (`w89963ef0i`) for UX diagnostics. For a complete inventory of cookies and durations, consult our Cookie Policy.

5. Subprocessors & Third-Party Service Providers (GDPR Art. 28)

We do not sell, rent, or trade your personal data. We engage only the following vetted subprocessors under GDPR Data Processing Agreements (DPAs):

6. Your Rights Under GDPR (Arts. 15–22) & LOPDGDD

Under GDPR Arts. 15–22, you have the right to access, rectify, erase, restrict, port your data, and withdraw consent at any time by emailing hello@kaijuconverter.com or via our Contact Page. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.