Privacy Policy

The controller for data processing on this site is:

David Hirsekorn, Schallemicher Str. 216, 51519 Odenthal, Germany — d@hirse.eu

foldly processes files entirely in your browser whenever possible. For most tools (merge, split, rotate, compress, etc.) your files never leave your device and are never uploaded to our server.

Server-side processing is used only when the task cannot technically be performed in the browser (Office conversion, OCR, strong compression). You are explicitly informed on the relevant tool page.

The site is hosted on a virtual server in Germany (Hetzner Online GmbH, Nuremberg/Falkenstein). A data processing agreement (Art. 28 GDPR) is in place.

The web server logs the following data on each request, in anonymized form:

• Requested URL, time, HTTP status, transferred bytes
• User-Agent, referrer
• Anonymized IP address (last octet zeroed)

Legal basis: Art. 6(1)(f) GDPR. Retention: max. 14 days.

For tools that cannot run client-side, your file is transferred over HTTPS, processed, and provided for download. After that:

• The file is automatically deleted within 15 minutes.
• No content analysis, no training, no third-party sharing.
• No file content is logged; only the fact that a conversion occurred (tool, size, success/failure) is stored in aggregate.

Legal basis: Art. 6(1)(b) GDPR.

foldly uses only strictly necessary cookies:

• foldly_lang — your selected language (1 year)
• Session cookie — only if you (optionally) sign up

No tracking cookies, no cross-site tracking, no advertising cookies. Therefore no cookie banner.

We run our own privacy-friendly analytics. Only anonymized, aggregated values are stored.

• No cookies, no plain-text IPs.
• We compute a hash of (anonymized IP, date, User-Agent). Because the date is part of the hash, hashes from different days cannot be linked.
• Daily hashes are automatically deleted after 7 days.
• Only aggregated values (views per page, unique visitors per day) are kept long-term.

Legal basis: Art. 6(1)(f) GDPR.

If you contact us by e-mail, your information is stored to handle the request. Data is not shared without your consent.

Registration is not required to use foldly. If you sign up, we store e-mail, bcrypt password hash, display name, language preference, and optionally an anonymized history (metadata only — never files).

You have the right of access, rectification, erasure, restriction, portability and objection. Contact d@hirse.eu. You may also lodge a complaint with a supervisory authority.

The site uses HTTPS (TLS). Server uploads are deleted promptly. Passwords are stored only as bcrypt hashes.

This policy may be updated to reflect legal or feature changes. The current version is always available on this page.