Privacy Policy

Who runs this site

FileWash (filewash.app) is an independent project operated by Cassi Lup, based in Romania. For any privacy question or request, email [email protected]. Because the operator is established in the EU, this site is subject to the GDPR.

Your files are never uploaded

Every tool on this site — PDF compression and merging, image conversion and resizing, metadata stripping, background removal, QR generation — runs entirely inside your web browser, using JavaScript and WebAssembly. The file you choose is read into your browser's memory, processed locally by your own device, and written back out as a download.

There is no upload step. We never receive your file, we never store it, and we could not access it even if asked to. Closing the tab discards everything. You can verify this yourself: open your browser's developer tools, switch to the Network tab, and run any tool — no request carrying your file is made. You can also disconnect from the internet after the page has loaded and the tools will still work.

This means we hold no copies of your documents, and there is nothing about your file contents for us to disclose, sell, or lose in a breach.

What we do collect

We collect a small amount of anonymous data about site usage, in two layers.

Always on: Cloudflare Web Analytics

We use Cloudflare Web Analytics to count visits. It is privacy-preserving by design: it sets no cookies, does not fingerprint visitors, and does not track people across sites. It records the page visited, the referring site, and coarse technical details such as browser, operating system, country, and page-load timing. This is aggregate data and does not identify you. Under GDPR we rely on our legitimate interest in understanding basic site usage; because no information is stored on your device, no consent is required. See Cloudflare Web Analytics.

Cloudflare also serves as our CDN and processes requests to the site, which involves handling your IP address for security and delivery purposes. See Cloudflare's privacy policy.

Only with your consent: Google Analytics

Google Analytics 4 helps us understand which tools people actually use. It sets cookies and shares data with Google. We may add advertising in future; if we do, this page will be updated before any ad code runs.

Neither loads until you accept in the consent banner. We use Google Consent Mode v2 with every category set to denied by default, so if you decline — or simply ignore the banner — no analytics cookies are set and no data is sent. Declining does not limit any tool on this site.

Relevant Google documentation: how Google uses data from sites that use its services.

Changing your mind

Your choice is stored in your browser's local storage under the key filewash-consent. To withdraw or change consent, clear this site's data in your browser settings — the banner will appear again on your next visit. Withdrawing consent is as easy as giving it.

Settings we store on your device

A few preferences are kept in your browser's local storage so the site behaves the way you left it. These are not cookies, are never transmitted to us, and are not used for tracking:

• filewash-theme — your light/dark mode preference.
• filewash-consent — your answer to the consent banner.

The developer API is separate

We also run an optional API for developers at api.filewash.app, described on our for-agents page. That service is different in kind: files sent to it are transmitted to a server in order to be processed. It keeps a metadata-only log (timestamp, tool name, API key, response status) and does not retain file contents after a request completes. Nothing on this website sends your files there — using the API is a deliberate, separate choice made by a developer writing code against it.

Your rights

Under the GDPR you have the right to access, correct, erase, restrict, and port your personal data, and to object to processing. In practice we hold very little that could identify you: no accounts, no email list, no file contents. The main data that exists is anonymous analytics, and — if you consented — Google's own records.

To exercise any right, email [email protected]. You also have the right to complain to a supervisory authority; in Romania this is the ANSPDCP.

Children

This site is not directed at children under 16 and we do not knowingly collect personal data from them.

Changes to this policy

If we change how data is handled — in particular if advertising is introduced — we will update this page and change the date above before the change takes effect.