Privacy Policy for x00.ai Tool House
Last Updated: December 31, 2025
1. Introduction
Welcome to x00.ai Tool House ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we handle information when you use our browser-based multimedia tools at app.x00.ai.
Data Controller:
- Name: Sasa Vasic (niceguysash)
- Location: Vienna, Austria
- Email: [email protected]
- Website: https://app.x00.ai
2. The Fundamental Principle: Client-Side Processing
Critical Information About Your Privacy:
All file processing (video watermarking, audio conversion, trimming, etc.) happens entirely within your web browser using WebAssembly (WASM) technology.
- Your files are NEVER uploaded to our servers
- Your files are NEVER stored in any cloud storage
- We do NOT have access to the content of your files
- All processing happens on YOUR device
- When you close the browser tab, all processed data is immediately cleared from your device's memory
This means we cannot see, access, store, or process your files in any way.
3. Data We Collect
3.1 Files You Process
Collection
None
Storage
None
Access
None
Your files never leave your browser. We have zero access to your content.
3.2 Server Logs
What We Collect: Vercel (our hosting provider) may temporarily log:
- IP addresses
- Browser type and version
- Pages visited
- Time and date of access
- Referring website
Purpose: Security, fraud prevention, and service stability
Legal Basis: Legitimate interest (GDPR Art. 6(1)(f))
Retention: Automatically deleted after 30 days by Vercel
Access: We do not have direct access to these logs
3.3 Local Browser Storage
What We Store: User preferences (e.g., theme settings, tool preferences)
Location: Your browser's local storage only
Access: Only you can access this data
Deletion: Cleared when you clear browser data
Legal Basis: Your implied consent through continued use
3.4 Email Addresses (Future)
If we add a newsletter or update notification feature in the future:
- Collection will be opt-in only
- Used solely for service updates
- Never sold or shared with third parties
- You can unsubscribe anytime
Currently, we do NOT collect email addresses.
4. What We Do NOT Collect
We do NOT use:
5. Third-Party Services
5.1 Hosting: Vercel Inc.
Location: San Francisco, USA
Purpose: Website hosting and content delivery
Data Transferred: IP address, browser information (standard web requests)
Legal Basis: Standard Contractual Clauses (SCCs) for EU-US data transfers
Privacy Policy: vercel.com/legal/privacy-policy
5.2 Domain Management: Cloudflare
Purpose: Domain name services only
Data: DNS queries (standard internet protocol)
Privacy Policy: cloudflare.com/privacypolicy
5.3 Client-Side Processing: FFmpeg.wasm
Type: Open-source WebAssembly library
Execution: Runs entirely in your browser
Data Transfer: None - no external connections made
Privacy Impact: Zero - everything stays on your device
6. Legal Basis for Processing
Under GDPR Article 6, we process data based on:
- Legitimate Interest (Art. 6(1)(f)): Operating the website, security, fraud prevention
- No Processing: For file content (we never access your files)
- Consent (Art. 6(1)(a)): If we add email collection in future (opt-in only)
7. Data Retention Periods
| Data Type | Retention Period |
|---|---|
| Processed files | Never stored (immediate deletion on tab close) |
| Server logs | 30 days (managed by Vercel) |
| Local storage preferences | Until you clear browser data |
| Email addresses (future) | Until you unsubscribe + 30 days |
8. Your Rights Under GDPR
As an EU/EEA resident, you have the following rights:
8.1 Right of Access (Art. 15)
Request confirmation of what personal data we hold about you (likely none beyond server logs).
8.2 Right to Rectification (Art. 16)
Request correction of inaccurate data.
8.3 Right to Erasure (Art. 17)
Request deletion of your personal data.
8.4 Right to Restriction (Art. 18)
Request limitation of processing in certain circumstances.
8.5 Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format.
8.6 Right to Object (Art. 21)
Object to processing based on legitimate interests.
8.7 Right to Withdraw Consent (Art. 7)
If future features require consent, you can withdraw it anytime.
8.8 Right to Lodge a Complaint
You have the right to file a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):
Website: dsb.gv.at
Email: [email protected]
Address: Barichgasse 40-42, 1030 Vienna, Austria
To Exercise Your Rights: Email us at [email protected]
9. Data Security
We protect your data through:
- HTTPS encryption (all connections secured)
- Client-side processing (files never transmitted)
- No data storage (nothing to breach)
- Minimal data collection (only essential logs)
- Trusted infrastructure (Vercel's secure hosting)
10. International Data Transfers
Your files: Never transferred (stay in your browser)
Server logs: Transferred to Vercel (USA) based on:
- Standard Contractual Clauses (SCCs) approved by EU Commission
- Adequate safeguards under GDPR Chapter V
11. Children's Privacy
x00.ai Tool House is intended for users aged 18 and older.
We do not knowingly collect data from individuals under 18. If you are under 18, please do not use our service. If we discover we have inadvertently collected data from a minor, we will delete it immediately.
12. Cookies
We do NOT use cookies.
Only essential browser storage (local storage) for saving your preferences. No tracking, no advertising, no analytics cookies.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use after changes indicates acceptance.
For material changes, we will display a prominent notice on the website.
14. Contact Us
For questions, concerns, or to exercise your rights:
- Email: [email protected]
- Website: app.x00.ai/contact
- Telegram: t.me/niceguysash
- Location: Vienna, Austria
15. Supervisory Authority
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna, Austria
Tel: +43 1 52 152-0
Email: [email protected]
Website: www.dsb.gv.at