Privacy Policy

Last updated: 17 April 2026

This policy explains what information chedgzoy.com collects, how it is used and what rights you have. The site is operated by Chris Chedgzoy as a personal website and is not a commercial business. It is written in plain English so you can actually read it.

A companion document, the Cookie Policy, lists every cookie the site can set and how consent works.

1. Who runs this site (the data controller)

The data controller for chedgzoy.com is Chris Chedgzoy, based in the United Kingdom. Any questions about this policy, or any request related to your data, can be sent via the contact form. I respond to requests within one month, as required by UK GDPR.

2. Lawful basis for processing

Under UK GDPR (the Data Protection Act 2018 as applied in the UK), any processing of personal data must have a lawful basis. The bases relied on by this site are:

  • Legitimate interests: for keeping server logs used to protect the site, investigate errors and deter abuse.
  • Consent: for any non-essential cookies (for example, advertising cookies if they are enabled in the future). You give or withdraw consent through the cookie banner.
  • Consent / contract: if you email me, your message is processed so I can reply.

3. What information is collected

When you just browse the site, no account is needed and I do not ask for your personal details. What is technically collected is:

  • Standard server log data: IP address, user agent (browser type), the page requested and the time. This is used for security, error diagnosis and traffic protection. Logs are kept for 30 days and then deleted.
  • A small number of strictly-necessary cookies set by Cloudflare for bot and DDoS protection. See the Cookie Policy.

When you email me, I receive your email address and whatever you wrote. I use this only to reply and I do not add it to any mailing list.

When you use the image converter (WebP Converter), any image you upload is processed in memory on the server and the results are returned immediately. Uploaded images are not saved to disk and are not retained after the request completes.

When you use the eBay sales tool, the item ID or URL you enter is used only to build a redirect URL and is not stored.

When you use any of the other utilities (string converter, colour scheme designer, SQL helper, icons, testing tools), all processing happens entirely in your browser. Nothing you type is sent to the server.

4. Third parties used by this site

The site uses a small number of third-party services to work properly. Each is listed here with what it does and what data it sees:

  • Cloudflare, Inc.: content delivery and security. Cloudflare proxies all traffic to chedgzoy.com and sees every visitor's IP address and request details. Cloudflare sets a small number of strictly-necessary security cookies. See Cloudflare's privacy policy.
  • OVHcloud (UK) Limited: the origin server that hosts the site is located in London, UK. OVH processes server traffic solely for hosting.
  • cdnjs (Cloudflare): serves the Font Awesome icon stylesheet. Cloudflare may log the request.
  • jsDelivr: serves the Devicon technology-logo stylesheet. See jsDelivr's privacy policy.
  • Buy Me a Coffee: the "Buy me a coffee" button is a normal link. No tracking scripts are embedded on this site. If you click through, Buy Me a Coffee's own privacy policy applies once you are on their site.

Fonts (Inter and JetBrains Mono) are served from this site's own servers, not from Google Fonts, so no visitor data is transmitted to Google when pages load.

5. Advertising (Google AdSense)

This site may, in the future, display advertising through Google AdSense. If and when AdSense is enabled:

  • Google and its partners use cookies to serve ads based on your prior visits to this site and other sites on the internet.
  • Google's use of advertising cookies enables it and its partners to serve ads to you. This includes the DoubleClick DART cookie.
  • You can opt out of personalised advertising at any time at adssettings.google.com.
  • More information on how Google uses data from partner sites is at policies.google.com/technologies/partner-sites.
  • Advertising cookies are never set unless you have given consent through the cookie banner on this site.

6. Cookies

A full list of cookies that this site can set, together with their purpose and duration, is published in the Cookie Policy. Non-essential cookies are only set if you accept them through the banner shown on your first visit. You can withdraw consent at any time by clicking the cookie link in the footer.

7. Data retention

  • Server logs: 30 days, then automatically deleted.
  • Cloudflare security logs: retained by Cloudflare under their own policy.
  • Emails you send me: kept while the conversation is active and for a reasonable period afterwards, then deleted. You can ask me to delete earlier correspondence at any time.
  • Images, JSON, SQL or other inputs to the utility tools: not retained at all.

8. International transfers

The origin server is in London, UK. However, some third parties listed above (notably Cloudflare) are US-based and may process data outside the UK. Where transfers occur, they rely on the UK International Data Transfer Agreement, EU Standard Contractual Clauses or equivalent safeguards as required by UK GDPR.

9. Security

The site is served only over HTTPS. All traffic is protected by Cloudflare's firewall and DDoS protection. No payment information is ever collected by this site.

10. Your rights under UK GDPR

You have the right to:

  • Be told what data, if any, is held about you (right of access)
  • Ask for inaccurate data to be corrected (right of rectification)
  • Ask for your data to be deleted (right of erasure)
  • Object to, or restrict, processing of your data
  • Request your data in a portable format
  • Withdraw consent for any processing that is based on consent
  • Lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO)

To exercise any of these rights, use the contact form.

11. Children

This site is not directed at children. No information is knowingly collected from anyone under the age of 16. If you believe a child has sent me personal information, please let me know and I will delete it.

12. Changes to this policy

If this policy is updated, the revision date at the top of the page will change and, for anything significant, a note will be published on the home page. Older versions can be provided on request.

13. Contact

Chris Chedgzoy
Contact: chedgzoy.com/contact
Website: https://chedgzoy.com