Privacy Policy
Last updated: July 23, 2026
PiliBox respects your privacy. This page explains what personal data is collected when you use PiliBox, why it is collected, how long it is retained, and your rights regarding that data. PiliBox is published and edited by Vixepti, an individual based in France.
1. Data Controller
Data Controller: Vixepti Email (all privacy questions and exercising your rights): contact@vixepti.fr Country: France
As PiliBox does not operate a formal organization requiring a designated Data Protection Officer, all privacy-related requests should be directed to contact@vixepti.fr.
2. Hosting Infrastructure
PiliBox is hosted on a VPS located in France, operated by a third-party hosting provider. The hosting provider's registered address is:
2 rue Kellermann, 59100 Roubaix, France
PiliBox's server infrastructure is configured with appropriate security measures to protect processed data. For security reasons, no specific details about the server software or technical stack are disclosed.
3. What Data We Collect
PiliBox collects data in different ways depending on how you use the site. There are no user accounts — no name, email address, password, or authentication data of any kind is collected.
3.1 Server-Side Tool Processing
When you use a server-side tool, you voluntarily transmit files or input data to our server solely for the purpose of processing your request. This data is:
- used only for the specific operation you have requested;
- automatically deleted within 30 minutes at the latest after processing is complete;
- additionally covered by a daily cron cleanup at midnight, which removes any leftover temporary files or tasks no longer in progress (safety net against crashes or errors);
- never stored beyond these cleanup processes;
- never shared with, sold to, or provided to any third party.
3.2 Server Logs
For every request made to PiliBox's server, the following information is logged:
- The URL visited
- The timestamp of the request
- The visitor's IP address
- The user-agent string
These logs are retained for a period of 6 months for the following purposes:
- Security monitoring and incident response
- Technical troubleshooting and performance optimization
- Anti-abuse protection (detecting and investigating malicious or abnormal usage patterns)
3.3 Analytics — Google Analytics
PiliBox uses Google Analytics to understand general site traffic, tool usage patterns, and overall visitor behavior. Google Analytics may set cookies and collect data including IP addresses in accordance with Google's own privacy practices. For more information, see Google's privacy policy.
Please note that Google Analytics involves an international data transfer to Google LLC, a US-based company. This transfer takes place under standard contractual clauses or equivalent mechanisms in accordance with applicable data protection law.
You may opt out of Google Analytics tracking by using browser settings, privacy-focused browser extensions (such as Ghostery or uBlock Origin), or the opt-out mechanisms provided by Google.
3.4 Theme Preference (Light/Dark Mode)
If you choose a theme preference on PiliBox (e.g., light or dark mode), this setting is stored exclusively in your browser's localStorage. It is never transmitted to our servers. localStorage is browser-side storage managed entirely by your browser — only the browser that stored the data can read it back.
4. Purposes and Legal Basis for Processing
| Data type | Purpose | Legal basis |
|---|---|---|
| Server logs (URL, IP, timestamp, user-agent) | Security monitoring, technical troubleshooting, anti-abuse protection | Legitimate interest (Article 6(1)(f) GDPR) |
| Uploaded files / input data (server-side tools) | To process the user's specific request | Processing necessary for the performance of a task carried out in the public interest, or under Article 6(1)(b) GDPR (contractual necessity) — note: no formal contract exists as use is free, but the processing is clearly necessary to fulfill the user's request |
| Google Analytics data | Site usage analytics and improvement | Consent (Article 6(1)(a) GDPR), which you provide by continuing to use the site; alternatively, legitimate interest in understanding site usage |
5. Data Retention
| Data type | Retention period |
|---|---|
| Uploaded files / input data (server-side tools) | Automatically deleted within 30 minutes after processing completes, plus a daily midnight cron cleanup as a safety net |
| Server access logs | 6 months from the date of the logged request |
| Google Analytics data | Governed by Google's own data retention policies (typically up to 26 months for certain data types); see Google Analytics privacy documentation for details |
| Theme preference | Stored indefinitely in your browser's localStorage until you clear it or reset your browser settings |
6. Recipients of Your Data
Your data may be shared with the following categories of recipients:
| Recipient | Why | Their privacy policy |
|---|---|---|
| Google Analytics (Google LLC, USA) | Site usage analytics | Google Privacy & Terms |
| Buy Me a Coffee (third-party donation platform) | If you choose to donate via the "Buy Me a Coffee" button on PiliBox | Buy Me a Coffee Privacy Policy |
Beyond the recipients listed above, your uploaded files and input data are never shared with, sold to, or provided to any third party.
7. International Transfers
PiliBox is operated from France. However, the service may be accessed by users anywhere in the world. Please note the following international transfer implications:
- Google Analytics: As a US-based company, Google LLC processes analytics data outside the European Union/EEA under standard contractual clauses or equivalent mechanisms as provided by Google.
- Buy Me a Coffee: If you make a donation through this platform, any data you share with Buy Me a Coffee is subject to their own international data transfer practices.
PiliBox does not itself transfer your personal data outside the EU/EEA beyond what is inherent in the use of the third-party services listed above.
8. Your Rights Under GDPR
As a user of PiliBox, you have the following rights regarding your personal data, to the extent applicable:
| Right | What it means | How to exercise it |
|---|---|---|
| Right of access | Request a copy of the personal data we hold about you | Contact contact@vixepti.fr |
| Right to rectification | Request correction of inaccurate or incomplete data | Contact contact@vixepti.fr |
| Right to erasure ("right to be forgotten") | Request deletion of your personal data | Contact contact@vixepti.fr (note: logs are retained for 6 months for security purposes; uploaded files are auto-deleted within 30 min) |
| Right to restriction of processing | Request that we limit how your data is used | Contact contact@vixepti.fr |
| Right to data portability | Request your data in a structured, commonly used, machine-readable format | Contact contact@vixepti.fr |
| Right to object | Object to processing based on legitimate interest | Contact contact@vixepti.fr |
To exercise any of these rights, please send a request to contact@vixepti.fr. We will respond as soon as reasonably possible, and in any case within one month of receiving your request (this period may be extended to three months if your request is complex, in which case we will notify you).
9. Cookies
PiliBox uses cookies set by Google Analytics only. These cookies are used to collect information about how visitors use the site, including page views, session duration, and general user journeys.
PiliBox does not currently display a cookie consent banner. If you do not wish to be tracked by Google Analytics, you can opt out by:
- Using browser privacy settings to block third-party cookies
- Installing a browser extension such as Ghostery, uBlock Origin, Privacy Badger, or similar
- Using Google Analytics' own opt-out browser add-on
The theme preference (light/dark mode), if set, is stored via the browser's localStorage — this is not a cookie and is not transmitted to the server.
10. Security
PiliBox implements appropriate technical and organizational security measures to protect your data against unauthorized access, loss, or misuse. However, no internet-based service can guarantee complete security. You acknowledge that any transmission of data to or from the internet is done at your own risk.
11. Sub-Processors
At this stage, PiliBox's sub-processors are limited to:
- Google Analytics — for site usage analytics
- Buy Me a Coffee — for donations (optional, user-initiated)
- The hosting provider (VPS, France) — for server infrastructure, covered by the hosting agreement
This list may be updated if PiliBox introduces new sub-processors in the future. Any such update will be reflected in this privacy policy.
12. Children's Privacy
PiliBox does not specifically target or direct its services to children. No minimum age restriction is in place. However, as a free and anonymous tool platform, PiliBox is not designed to attract children, and no personal data likely to be contributed by or about children is knowingly collected.
13. Global Audience
PiliBox may be accessed by users from anywhere in the world, not only within the European Union. Users outside the EU should note that data processing on PiliBox is governed by French and EU data protection law as described in this policy.
14. Changes to This Policy
Vixepti reserves the right to update this privacy policy at any time. Any material changes will be reflected by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.
If significant changes are made that affect your rights or the way we process your data, a prominent notice will be posted on the PiliBox website. Continued use of PiliBox after any such update constitutes your acceptance of the revised policy.
15. Complaints and Contact
If you have any questions, concerns, or requests regarding this privacy policy or how your data is handled, please contact:
Email: contact@vixepti.fr
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that PiliBox's data processing activities violate your rights under applicable data protection law. In France, the relevant supervisory authority is the CNIL (Commission Nationale de l'Informatique et des Libertés). For information on how to submit a complaint, visit: https://www.cnil.fr/plaintes