WebP.pl privacy policy

We treat privacy as a priority. Below we describe what data we process, why, on what legal basis and for how long. The website operates without registering accounts and without publishing the owner's personal data.

1. Data administrator

The data controller is the owner of the websiteWebP.plwho is a natural person. Contact only via the form:https://webp.pl/Contact.

Data identifying the owner are not published on the website. In the event of exercising GDPR rights, communication takes place via the contact form.

2. Scope of the website

WebP.pl provides online tools for working with files, text and data. Where possible, operations are performed locally in the browser. Some functions require server-side processing with short technical retention.

3. What data do we process

The scope depends on the tool used and your activities.

• Operational data offiles, i.e. uploaded materials, their metadata and conversion settings. The processing is automatic and temporary.
• Technical datasuch as IP address, timestamps, session ID, browser headers and error logs.
• Communication dataonly when sending a message via the form. They include the content of the notification and data provided voluntarily by you.

4. Objectives and legal basis

• Providing theservice, i.e. performing the requested operations on content and files. Basis: art. 6 section 1 letter b GDPR.
• Maintenance and security ofincluding diagnostics and protection against abuse. Basis: art. 6 section 1 letter f GDPR.
• Handlingrequests from the contact form. Basis: art. 6 section 1 letter f GDPR or letter b GDPR depending on the case.

5. Data retention and deletion

We store source files and processing results only as long as necessary to perform the operation and download the work result. The standard retention time for files isup to 24 hours, after which they are removed from production systems. We store server logsfor up to 30 daysunless longer storage is necessary to clarify the incident.

6. Cookies and browser memory

We only use necessary cookies andlocalStorage i sessionStorageentries to remember tool settings and interface state. We do not use marketing cookies. Analytics, if implemented, will only work with your consent and will be described in this section.

7. Data recipients and location

We cooperate with entities that process data on our behalf, such as hosting and email providers. We conclude entrustment agreements with them in accordance with Art. 28 GDPR. The operational servers are located in the European Union. Data is not transferred outside the EEA without an appropriate legal basis.

8. Security

We use TLS encryption, access restrictions, logging of administrative operations, separation of environments and regular updates. We minimize external scripts and libraries to reduce the attack surface and improve performance.

9. Your rights

You have the right to access your data, rectify it, delete it, limit processing, transfer it, object to it and lodge a complaint with the President of the Personal Data Protection Office. Please send requests regarding rights via the form:https://webp.pl/Contact. We respond without undue delay, no later than within one month.

10. Children

The website is addressed to adults and people over 16 years of age with the consent of their guardian. We do not knowingly collect data from younger children. If you believe that your child has provided data, please contact us via the form to have it removed.

11. Automated decisions

We do not make decisions with respect to you that have legal effects solely in an automated manner. Algorithms work only to implement a selected technical operation.

12. Changes to the policy

The content of the policy may change as the website develops or the law changes. The current version is always published on this page with its effective date. We communicate significant changes on the website.

Version1.0  |Effective date2025-11-04  |JurisdictionEU, GDPR

Shortcut