Privacy Policy

Last updated: 1 August 2026 · Effective from: 1 August 2026

This policy explains what happens to your data when you use Auctory Tools at auctoryai.com. It is written to be read, not to be skipped — so the important part comes first.

The short version

• The files you open in our tools are never uploaded to a server. They are not stored, not copied, and not seen by us.
• There is no account, no sign-up and no login, so there is nothing to link your activity to.
• We measure anonymous, aggregate traffic with Google Analytics 4 — page addresses, referrer, device type, approximate country or city.
• Advertising is currently switched off. If it is ever switched on, this page will be updated and a cookie notice will appear first.

Who is responsible for your data

Auctory AI operates auctoryai.com and is the data controller for the limited measurement data described below. You can reach us at iletisim@auctoryai.com or through our contact page.

Your files are processed on your device — this is technical, not marketing

Every tool on this site is a static web page. When you drop a photo, a PDF, a spreadsheet, an audio file or a 3D model into a tool, the browser reads that file from your own disk into its own memory and processes it there, using standard browser technology: the Canvas and Web Audio APIs, WebAssembly, Web Workers and the File API.

There is no upload step because there is no application server to upload to. We do not run a backend that could receive a file, we do not run a queue that could hold one, and we do not run storage that could keep one. If you disconnect from the internet after a tool page has loaded, most tools keep working — that is the simplest proof that your file is not going anywhere.

This also means the result of a tool — the compressed PDF, the watermarked photo, the converted GPX — is created in your browser and saved straight to your downloads folder. It never passes through us.

What actually reaches our server

The only things our hosting provider serves to you are the page itself and its static assets: HTML, CSS, JavaScript and fonts. Like every web server on the internet, the hosting layer may keep short-lived technical access logs (IP address, timestamp, requested file, user agent) for security and troubleshooting. These logs are not used to profile you, are not combined with analytics data, and are not shared for marketing.

What we measure with Google Analytics

We use Google Analytics 4 to understand which tools people find useful and where the site is broken. Analytics collects standard visit data:

• the address of the page you viewed and the page that referred you;
• device and browser type, screen size, operating system, language;
• approximate location derived from IP address — country and, in larger cities, city level;
• basic interaction events such as page views, scrolls and outbound clicks.

What is never sent: your name, e-mail address or any identity information (we do not ask for any), the names of the files you open, the contents of those files, or anything you type into a tool. Analytics runs at the page level only; the tools do not report on what you do inside them.

Google Analytics uses cookies to distinguish visits — see our Cookie Policy for the exact names and lifetimes, and for how to opt out.

Content delivery networks

Some tools need a specialised library to do their job — a PDF engine, a video encoder, a 3D mesh parser. Rather than shipping every library to every visitor, those tools load the library from a public CDN at the moment you use them. The CDNs we use are jsDelivr, cdnjs (Cloudflare), unpkg and Google Fonts.

To be honest about the consequence: when your browser requests a file from one of those CDNs, the CDN sees your IP address, the requested file and your user agent, and it can set or read its own technical data under its own privacy policy. The file you are working on is not part of that request — only the library is fetched. If you would rather avoid this, a content blocker that blocks third-party requests will prevent it, though the affected tools will then not run.

Advertising

Advertising is currently disabled across the whole site. No ad script is loaded, no ad cookie is set and no ad network receives a request from these pages today.

Auctory Tools is free and we intend to keep it free, which means advertising may be enabled in the future — most likely Google AdSense or Google Ad Manager. If and when that happens, those services may use cookies or similar identifiers to limit repetition and measure ad performance, and we will show a cookie consent notice before any non-essential cookie is set. This page and the Cookie Policy will be updated on the same day.

Legal basis for processing

Under the GDPR, our analytics and any future advertising rely on your consent where consent is required, and on our legitimate interest in operating and securing the site for basic server logs. Under Turkish law (KVKK No. 6698), the same processing rests on your explicit consent for cookie-based measurement, and on the legitimate interest ground in Article 5/2(f) for security logs. You can withdraw consent at any time by blocking cookies or using the opt-out tools described in the Cookie Policy.

Your rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed; to request information about that processing; to learn its purpose and whether it is used accordingly; to know the third parties to whom it is transferred at home or abroad; to request correction of incomplete or incorrect data and notification of that correction to third parties; to request erasure or destruction when the reasons for processing disappear; to object to a result produced solely by automated analysis; and to claim compensation for damage caused by unlawful processing.

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the equivalent rights of access, rectification, erasure, restriction of processing, data portability, objection — including objection to profiling — and the right to lodge a complaint with your national supervisory authority.

To exercise any of these, write to iletisim@auctoryai.com. Please note the honest limitation: because we hold no account and no file, in most cases the only data we could possibly have about you is the anonymous analytics record described above, and we may need you to describe your visit before we can locate anything at all.

How long data is kept

We keep no user data on our own servers, because none is created there — there is no database, no file store and no user table. Analytics data lives in Google's systems and is subject to Google's retention settings, which we keep at the shortest practical period Google offers. Technical server logs held by our hosting provider are rotated automatically after a short period.

International transfers

Google Analytics and the CDNs listed above are operated by companies whose infrastructure spans multiple countries, so the limited data they receive may be processed outside Türkiye and outside the EEA. Those providers rely on their own transfer mechanisms, such as the European Commission's standard contractual clauses.

Children's privacy

Auctory Tools is not directed at children under 13, and we do not knowingly collect data from them. Since we do not collect identity data from anyone, we have no way to identify a child user; if you believe a child's personal data has somehow reached us, contact us and we will delete whatever we can locate.

Security

The site is served over HTTPS. Beyond that, the strongest security measure here is architectural: data that is never transmitted cannot be intercepted, and data that is never stored cannot be breached.

Changes to this policy

If this policy changes materially — for example when advertising is enabled — we will update the date at the top of the page and, for changes that affect cookies, show a notice on the site. Continued use of the tools after a change means you accept the updated policy.

Contact

Questions, requests or complaints: iletisim@auctoryai.com. See also our Terms of Use, Cookie Policy and About page.

This text is provided for information purposes and is a general template; get legal advice for the circumstances specific to your own business.