Privacy Policy

At DodoDeck (accessible at https://dododeck.com), we believe your digital privacy is a fundamental human right. We design our browser productivity tools and Chrome extensions around a strict local-first philosophy. This Privacy Policy details the exact types of information we process, how our client-side architecture keeps your documents solely on your device, how our temporary cloud file transfer operates, and our strict commitment to an ad-free experience.

1. Client-Side Processing vs. Temporary Cloud Transit

To provide absolute transparency, we distinguish between our local in-browser utilities and our temporary file-sharing service:

• 100% In-Browser Local Tools: Utilities including the PDF Editor, PDF Tools, Background Remover, Screenshot Viewer, TOTP Authenticator, QR Studio, Image Resizer, and Age Calculator execute 100% inside your local web browser via WebAssembly (WASM), Canvas API, and HTML5. Documents, PDFs, passwords, and images processed with these tools are never uploaded to, inspected by, or saved on any remote servers.
• Instant File Share Service (/tools/file-share): When you explicitly choose to transfer files or folders using our Instant File Share tool, your uploaded files are transmitted securely over TLS encryption to high-speed cloud infrastructure (Cloudflare R2) solely to enable recipient download via your clean link or 6-digit code. All shared files are automatically, permanently, and irreversibly deleted after 7 days. We never inspect, index, or retain file contents.

2. Artificial Intelligence (AI) & Ephemeral Processing

For AI-assisted writing tools (such as SmartWriter AI), text prompts you submit are securely transmitted via TLS encryption to Cloudflare Workers AI strictly to generate your requested content in real time. Prompts and generated outputs are processed ephemerally and are never used to train AI models, never sold to third parties, and discarded immediately after processing.

3. Information We Never Collect

To ensure complete peace of mind, DodoDeck strictly adheres to zero-data harvesting practices:

• We never inspect, monitor, or read the contents of files, PDFs, or images you edit.
• We never record or store your two-factor authentication (TOTP) secret keys or QR payloads.
• We never sell, rent, monetize, or broker your personal information or data to third parties.
• We never deploy keystroke loggers, invasive browser fingerprinting, or background screen recorders.

4. 100% Ad-Free & Tracker-Free Commitment

Unlike many web utility sites, DodoDeck does not display third-party advertisements and does not host ad-tracking networks (such as Google AdSense). We believe productivity tools should be clean, focused, and free from intrusive commercial monitoring. You will never encounter behavioral advertising trackers or deceptive popups on our platform.

5. Anonymous Analytics & Infrastructure Logs

To maintain high performance and safeguard platform reliability, we collect minimal technical diagnostics:

• Anonymous Web Analytics: We use Google Analytics 4 (GA4) with IP anonymization enabled to understand general website traffic trends (e.g. tool popularity, general geographic region, and device types). This data is completely aggregated and cannot identify individual users.
• Security & DDoS Logs: Our enterprise CDN provider (Cloudflare) automatically records anonymous technical diagnostic logs (such as request timestamps and browser user-agent) to prevent automated cyber attacks and maintain network stability.
• Direct Inquiries: When you voluntarily submit a message through our Contact form, we receive your name, email address, and message text solely to respond to your inquiry.

6. Local Browser Storage (LocalStorage & IndexedDB)

DodoDeck uses your browser's LocalStorage or IndexedDB solely to remember your UI preferences (such as Light/Dark theme selection) or preserve offline working drafts locally on your machine for your convenience. This data remains entirely on your local device and can be cleared at any time via your browser settings.

7. Chrome Extensions & Web Store Compliance

Our official browser extensions distributed through the Chrome Web Store strictly adhere to the Chrome Web Store Developer Program Policies, including the Single Purpose Policy and Limited Use requirements:

• Our extensions operate locally and only request specific permissions essential for their utility (e.g. active tab capture for screenshots).
• We do not intercept, collect, or transmit your web browsing history, private credentials, or network traffic.
• Extensions are completely free of hidden ad injectors, crypto miners, or covert background analytics.

8. Payment Processing & Merchant of Record (Paddle.com)

When purchasing paid software licenses or subscriptions (such as Dodo{anty} tiers or digital store assets), payment transactions are handled exclusively by our authorized Merchant of Record, Paddle.com (Paddle Payments Ltd / Paddle.com Market Ltd):

• No Card Data Storage: DodoDeck does not collect, receive, process, or store your credit card numbers, debit card details, CVV codes, or bank account credentials. All billing information is entered directly into Paddle's secure, PCI-DSS Level 1 compliant checkout interface.
• Order Fulfillment Data: To activate software licenses, Paddle provides DodoDeck with non-sensitive transaction confirmation data, such as your email address, purchase timestamp, ordered plan, and license identifier.
• Paddle Privacy Policy: Payment processing and global tax compliance by Paddle are subject to Paddle's Privacy Policy.

9. Data Security & Encryption

All communication between your browser and DodoDeck is protected using modern Transport Layer Security (TLS 1.3 / HTTPS) with strict HTTP Strict Transport Security (HSTS) and hardened HTTP headers. Our CDN architecture actively defends against unauthorized tampering, eavesdropping, and data interception.

10. GDPR, CCPA / CPRA & Global Privacy Rights

Whether you reside in the European Economic Area (EEA), United Kingdom, California, or anywhere globally, DodoDeck fully respects your statutory data protection rights. Because we do not hoard or monetize personal document data, there is no dossier to inspect or sell. You maintain the right to request clarification, request deletion of any contact correspondence, or opt out of analytics at any time.

11. Children's Privacy (COPPA Compliance)

DodoDeck does not knowingly collect or solicit personal identifiable information from children under the age of 13. If you believe a minor has submitted personal information through our contact form, please notify us immediately so we can promptly delete such records.

12. Third-Party Links & Partner Services

DodoDeck may occasionally display partner links (such as NordVPN) or community tip widgets (SupportKori). Clicking an external link directs you to a third-party website operated under their independent privacy policies and terms of service. We encourage reviewing the privacy statements of any external site you visit.

13. Changes to This Privacy Policy & Contact

We may update this Privacy Policy periodically to reflect new tool features or legal updates. Updates will be posted on this page with the revised date below. For any questions or privacy inquiries, contact our team via our official Contact Page.