Last Updated: April 12, 2026
Favtoo is committed to compliance with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), the United Kingdom, and Switzerland.
1. Data Controller
Favtoo acts as the data controller for any personal data processed through our website. Contact details are provided at the end of this page.
2. Data We Process
2.1 Data We Do Not Process
Files you process using our tools (PDFs, images, text files, etc.) are never transmitted to our servers. All processing happens locally in your browser. We have no access to this data.
2.2 Data We Do Process
| Data Category | Source | Legal Basis |
|---|---|---|
| Website usage statistics (aggregated page views, referrer, device type — processed by Plausible; no cookies on our site) | Plausible Analytics | Legitimate interests (Art. 6(1)(f)) |
| Advertising data (cookies, browsing behavior) | Google AdSense | Consent (Art. 6(1)(a)) |
| Email messages you send us (name, email address, message content) | Voluntary user input | Consent (Art. 6(1)(a)) |
3. Legal Bases for Processing
- Legitimate interests (Art. 6(1)(f)): We use Plausible Analytics to understand how our site is used. Plausible does not use cookies on Favtoo and processes aggregated statistics; details are in our Privacy Policy.
- Consent (Art. 6(1)(a)): Google AdSense cookies require your consent. You may opt out at any time through Google Ads Settings.
4. Your Rights Under GDPR
As a data subject in the EEA, you have the following rights:
- Right of Access (Art. 15): Request a copy of your personal data
- Right to Rectification (Art. 16): Request correction of inaccurate data
- Right to Erasure (Art. 17): Request deletion of your personal data
- Right to Restriction (Art. 18): Request restriction of data processing
- Right to Data Portability (Art. 20): Receive your data in a machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interest
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time without affecting prior processing
5. Data Transfers
Plausible Analytics (EU-based processor) processes analytics data in line with their documentation and Data Processing Agreement.
Google AdSense may transfer data outside the EEA; Google relies on Standard Contractual Clauses (SCCs) for such transfers.
6. Data Retention
Email correspondence is retained for up to 24 months and then deleted. Plausible Analytics retention of aggregate statistics follows Plausible's policies. Google AdSense cookie retention is managed by Google per their policies.
7. GDPR Contact
For GDPR-related inquiries, contact us at:
- Email: [email protected]
- Response time: Within 30 days as required by GDPR
8. Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority in your country of residence, your place of work, or the place of the alleged infringement.
9. Data Protection Impact Assessment
Given that our service processes no personal files on our servers, and third-party processing is limited to (1) privacy-focused analytics via Plausible Analytics (no cookies on our site, aggregated statistics) and (2) optional Google AdSense advertising cookies with consent, the risk to data subjects is assessed as minimal.