Privacy Policy

Zacdaddy Tools is operated by a UK-based sole trader. For the purposes of UK data protection law, the operator of Zacdaddy Tools is the data controller for personal information processed through this website. In this policy, “we”, “us” and “Zacdaddy” mean that operator.

For a privacy question or request, email hello@zacdaddytools.com. Please do not send sensitive personal information unless it is genuinely needed for your enquiry.

If you use the Contact page, we receive the name, email address, subject and message you enter. The browser also creates a random submission identifier so the email service can avoid processing the same submission twice. A hidden anti-spam field and reasonable field-length limits help us reject automated or malformed messages.

The form sends this information to a Cloudflare Worker. The Worker checks the request origin, validates the fields, applies a rate limit using the connecting IP address and verifies the Cloudflare Turnstile security token. The IP address and token are sent to Cloudflare for that verification.

After successful verification, the name, email address, subject and message are sent through Resend to hello@zacdaddytools.com, which is hosted by IONOS. The mailbox may forward the message to an authorised mailbox used to manage enquiries. Resend returns a message identifier, and the Worker records that identifier and the submission identifier in its service log; it does not deliberately log the message content on successful submission.

We use this information to receive, answer and manage enquiries and to protect the form from misuse. We rely on our legitimate interests in communicating with visitors, operating the website and keeping the service secure. Where an enquiry asks us to take steps before providing a service, processing may also be necessary to respond to that request.

Turnstile is loaded only on the Contact page. It runs browser checks and processes signals such as network and device information to distinguish people from automated traffic. Cloudflare describes these signals as being used for website security rather than advertising retargeting.

Turnstile may use strictly necessary cookies or similar security technology. Learn more in Cloudflare’s Turnstile Privacy Addendum.

Zacdaddy’s tools process the information you enter locally in your browser. Your entered data is not sent to Zacdaddy’s servers.

The Currency Converter retrieves exchange-rate information from the Frankfurter service. Only the selected currency codes are sent to that service; the amount you enter remains in your browser.

This does not apply to the Contact form, which sends the information you provide so that your enquiry can be delivered to us. See the Contact form section above for details.

Copy and download controls use your browser’s clipboard and local file features. Those actions are handled by your device and browser. You should still avoid pasting confidential information into a shared or untrusted device.

The Currency Converter obtains reference rates directly from the Frankfurter API. The request contains the two selected currency codes. The amount you enter is multiplied by the returned rate in your browser and is not included in the API request.

Because the request goes directly from your browser to Frankfurter, that service can receive ordinary network information such as your IP address and request details. You can read more about the service at frankfurter.dev.

Zacdaddy’s current production website does not set first-party preference, analytics or advertising cookies and does not store visitor data in local storage, session storage or IndexedDB. There is therefore no general cookie banner on the current site.

The Contact page uses Turnstile’s strictly necessary security technology as explained above. Blocking it may prevent the contact form from being submitted. If non-essential analytics, advertising or preference technologies are added, this policy and the site’s consent controls will be reviewed before they are used.

Zacdaddy does not currently load Google Analytics, another visitor analytics product, a marketing pixel or Google AdSense. We do not use the website to build advertising profiles, and the current code does not sell personal information.

Google Search Console is used to understand how pages appear in Google Search. It provides search-performance and indexing information from Google; the Zacdaddy website does not load a Search Console tracking script or set a Search Console cookie in a visitor’s browser.

Advertising may be considered in future, but it is not live now. Before any advertising service that uses non-essential cookies or similar technologies is enabled, Zacdaddy will update this notice and implement an appropriate consent mechanism so those technologies are not used before a visitor’s choice where consent is required.

Hostinger hosts the website and may create normal web-server and security logs when pages and files are requested. These can include IP address, requested URL, date and time, browser or user-agent information, referrer and response status. They are used to deliver the site, diagnose errors, prevent abuse and maintain security.

Cloudflare also processes request information for the contact Worker, rate limiting, Turnstile verification and enabled Worker observability. Failed service calls may produce technical error logs. These logs are not used by Zacdaddy for advertising.

We use the following providers where needed to operate the current website:

• Hostinger — website hosting and web-server logs.
• Cloudflare — the contact Worker, rate limiting, Turnstile and related service logs.
• Resend — transmission of contact-form emails and delivery records.
• IONOS — hosting for the hello@zacdaddytools.com mailbox.
• Frankfurter — reference exchange-rate requests from the Currency Converter.

We share information with these providers only where needed for the purposes described in this policy. We may also disclose information where required by law, to establish or defend legal rights, or to investigate serious misuse. We do not sell contact enquiries.

Some service providers operate internationally, so information may be processed outside the UK. In particular, Resend states that its primary processing takes place in the United States and describes UK transfer safeguards in its Data Processing Addendum. See Resend’s Privacy Policy and Data Processing Addendum.

Where UK personal information is transferred internationally, the relevant provider terms and legally recognised safeguards apply, such as an adequacy arrangement or approved contractual transfer safeguards where required.

The current contact system does not apply one fixed automatic deletion period across the Cloudflare, Resend and email services. Contact enquiries and related records are kept only for as long as reasonably needed to respond, manage the enquiry, maintain security, resolve disputes and meet any legal obligations. Provider-controlled technical and delivery records are also subject to the provider’s settings and retention terms.

You may ask us to delete a contact enquiry. We will consider the request under applicable data-protection law and will also consider information held by the relevant service providers where appropriate.

Depending on the circumstances, UK data-protection law may give you rights to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, data portability or to object to processing. Some rights do not apply in every situation, and legal exemptions may apply.

Send a request to hello@zacdaddytools.com. We may need enough information to identify the relevant contact message and confirm that the request is genuine. You can also find guidance or make a complaint through the Information Commissioner’s Office.

Zacdaddy Tools is a general-audience utility website and is not specifically directed at children. No account is required. If a child sends a contact message, we will use the information only as needed to deal with that enquiry and the security of the service. A parent or guardian can contact us about information submitted by a child.

We use measures intended to protect the limited information handled by the site, including HTTPS, request-size and field limits, origin checks, rate limiting, Turnstile verification, HTML escaping for contact emails and restricted service credentials. No internet service can promise absolute security, so please send only the information needed for your enquiry.

We may update this policy when the website, its providers or legal requirements change. The date at the top will be updated when a revised version is published. Material changes, such as adding advertising or non-essential tracking, will be reflected here before the relevant processing begins.