This Privacy Policy explains how SAW TOOLS ("we", "us", or "the Service") handles information when you use the website saw-tools.me. We have built this Service with privacy by design: almost everything happens locally in your browser, and we collect as little data as possible. This policy is written to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Children's Online Privacy Protection Act (COPPA).
1. Who we are
Data controller: SAW CONCEPT (SASU), share capital 1,000 €
Registered office: 1553 Chemin de Gibrou, 82200 Moissac, France
SIRET: 988 041 836 00012 · RCS: Montauban · VAT: FR05988041836
Director / DPO: William Noël
Email: hello@saw-tools.me
Website: https://saw-tools.me
2. What data we collect
We split data into two categories:
2.1 Data processed locally in your browser (never sent to us)
- Whatever you type into a tool (passwords generated, text encoded, colors picked, calculator input, etc.). This never leaves your device.
- Your language preference, stored in your browser's
localStorageunder the keysaw-lang-pref. This is not a personal identifier and is not transmitted. - Whether you dismissed the sticky ad banner, stored in
sessionStoragefor the duration of your visit only.
2.2 Data automatically collected by our hosting provider and third parties
- Server logs (OVH): IP address, user agent, page requested, timestamp, HTTP referrer. Kept for security and statistics, retention 12 months maximum.
- Google AdSense / Google Funding Choices (when active): may set cookies to display personalized or non-personalized advertising and to comply with consent requirements. See section 5.
- Google Fonts: our pages load the "Outfit" font from Google's CDN. Google may log the IP address that requests the font.
- jsDelivr CDN (only on the QR Code Generator page): loads the qrcode-generator JavaScript library. jsDelivr may log the IP address.
3. Why we process this data (legal basis under GDPR)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Operate the website (serve pages) | Legitimate interest (Art. 6(1)(f)) |
| Security, abuse prevention, server logs | Legitimate interest |
| Storing your language preference | Necessary for the service you requested (Art. 6(1)(b)) / strictly necessary cookies, no consent required |
| Display personalized advertising | Your consent (Art. 6(1)(a)) |
| Display non-personalized advertising | Legitimate interest, with opt-out |
4. Who we share data with
We do not sell your personal data. We do not maintain a customer database. The third parties involved in delivering the Service are:
- OVH SAS (hosting provider, France) — receives the technical request data described above.
- Google LLC (advertising, fonts) — see Google Privacy Policy.
- jsDelivr (CDN for the QR library) — see jsDelivr Privacy Policy.
None of these processors receive the content you type into the tools — only standard HTTP request data.
5. Cookies and similar technologies
SAW TOOLS itself does not set first-party cookies. We use:
- localStorage / sessionStorage: exclusively functional (language preference, ad banner dismissal). No tracking.
- Third-party cookies (advertising): Google AdSense, when active, places cookies for ad serving. EU users see a consent banner before any non-essential cookie is set; you can accept, refuse, or fine-tune.
You can clear local storage and cookies at any time via your browser settings.
6. Your rights
6.1 If you are in the European Union (GDPR)
You have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erasure ("right to be forgotten") (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time (for consent-based processing)
- Lodge a complaint with your data protection authority (e.g. CNIL in France)
To exercise these rights, email hello@saw-tools.me. Requests are handled free of charge and without undue delay, and in any case within one month of receipt (extendable by two further months for complex or numerous requests, in which case you will be informed within the first month). To prevent unauthorized disclosure, we may need to verify your identity before responding — typically by asking for additional information that lets us reasonably link the request to data we hold (e.g., the IP address or approximate date of your visit). We request only what is strictly necessary for that verification.
6.2 If you are in California (CCPA / CPRA)
You have the right to:
- Know what personal information is collected about you
- Delete personal information (subject to exceptions)
- Opt out of the sale or sharing of personal information — note: we do not sell personal information
- Correct inaccurate personal information
- Limit the use of sensitive personal information
- Non-discrimination for exercising your rights
To exercise these rights, email hello@saw-tools.me with the subject line "CCPA Request".
6.3 Other US states
Residents of states with similar laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, etc.) have substantially equivalent rights and may use the same email address.
7. Children
SAW TOOLS is not directed to children under 13 (under 16 in the EU). The Service has no user accounts, no contact form, no upload feature, and no other interactive mechanism through which a child — or anyone else — can submit personal information to us. We therefore do not knowingly collect personal information from children. If a parent or legal guardian wishes to raise any matter concerning a minor's use of the Service, they may contact us at hello@saw-tools.me.
8. International transfers
Data may be processed in the EU (OVH, France) or the United States (Google services). Where data is transferred outside the EEA, transfers are protected by Standard Contractual Clauses or equivalent mechanisms approved by the European Commission.
9. Data retention
- Server logs: 12 months
- localStorage entries: until you clear your browser data
- AdSense cookies: as defined by Google (typically up to 13 months)
10. Security
We use HTTPS encryption for all traffic. Our hosting provider OVH operates ISO 27001-certified data centers. As most processing happens in your browser, the attack surface is intentionally minimal.
11. Personal data breaches
In the event of a personal data breach likely to result in a risk to the rights and freedoms of individuals, we will notify the competent supervisory authority (in France, the CNIL) without undue delay and, where feasible, no later than 72 hours after becoming aware of it, in accordance with Article 33 of the GDPR. Where the breach is likely to result in a high risk to the affected persons, we will also inform them directly without undue delay (Article 34 GDPR), unless one of the exemptions of Article 34(3) applies (e.g., the data was rendered unintelligible by encryption, or the high risk is no longer likely to materialize). Given that we operate no user database and no account system, the realistic exposure is limited to server logs (IP, user agent, request data) held by our hosting provider.
12. "Do Not Track" signals
We honor the Global Privacy Control (GPC) signal as an opt-out request from California residents under the CCPA.
13. Changes to this policy
We may update this Privacy Policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the homepage for at least 30 days.
14. Contact
For any privacy-related question or to exercise your rights:
Email: hello@saw-tools.me