Privacy information

Controller and contact

Karel Kaňa — private individual, no business registration number.
Contact email: admin@karelkana.eu

For privacy questions and rights requests, email admin@karelkana.eu. Do not send passwords or identity documents without prior agreement. The privacy contact is the same as the service contact.

Accounts, files and communication

For accounts we process email, username, optional display name and details you provide, a secured password hash, settings, sign-ins and access tokens. Cloud processing includes files, names, folders, sizes, changes, shares and linked-app content. These are needed to provide the service and fulfil our relationship with users.

Storage enquiries include name, email, requested plan, message, time, reference and the signed-in account identifier if applicable. Processing is needed to answer your request before any service agreement. The form checkbox acknowledges the information; it is not marketing consent.

Security and operational logs can include IP addresses, timestamps, requested paths, response status, errors and client information. The legitimate interest is protecting accounts, detecting abuse and resolving faults. Marketing mailings and advertising profiling are not installed.

Public tools

The deployed PDF converters and Photo Resizer process selected files in the browser on your device. Selecting a file there does not upload it to your personal cloud. The web server still delivers the application and may log that access. Opening external links or sharing the result is a separate action.

Pastebin stores encrypted content and necessary metadata such as expiry and burn-after-reading settings. Encryption and decryption run in the browser. The key in the link fragment is not transmitted in a normal HTTP request. The server also uses data to rate-limit requests. A recipient with the full link can read and copy the content.

Recipients and location

Server s1 is hosted by COOLHOUSING s.r.o. in the Czech Republic. Operational backups are currently stored locally on s1.

Authorised operators and administrators can access stored data. Document editors and other server components run in Karel Office infrastructure; ordinary cloud content is not generally end-to-end encrypted.

Verification and service emails are sent through WEDOS and are also received by your email provider. Chosen recipients receive content when you share it. Public authorities receive data when legally required. External links are governed by the destination's policies. Using an open-source library does not itself send your files to its authors.

Some features, such as OCR, may fetch supporting models or libraries from external CDNs. Their operators receive the IP address and ordinary request information; the document itself is not uploaded to that CDN for local conversion.

Retention and deletion

Account and cloud content remain while the account is in use, until you remove them or an account closure request is fulfilled. Trash and version history may temporarily retain deleted or replaced files. Incomplete registrations are normally cleaned after 30 days.

Enquiries and support correspondence are kept while being handled and then only as needed for a resulting agreement, legal claims or statutory obligations. Log retention depends on the system and the need to investigate a specific incident.

Pastebin expires after your chosen 5 minutes, 1 hour, 1 day, 1 week or 1 month; the default is 1 day. Expired content becomes unavailable for normal retrieval and is then removed by cleanup. Burn-after-reading and deletion links may end availability earlier.

Deletion from live storage does not instantly delete every backup. Operational backups are currently local and have no single configured automatic expiry period. A full-deletion request therefore also requires consideration of existing backup copies. Restoring a system must not undo an already fulfilled deletion request. Archived data may be retained only while a valid reason or legal obligation remains.

Your rights

Subject to GDPR conditions, you can request access, rectification, erasure, restriction and portability, and object to legitimate-interest processing. Optional language-storage consent can be withdrawn in storage settings without affecting earlier processing.

Email admin@karelkana.eu. We may reasonably verify identity to protect your data. Requests are normally answered within one month, with justified extensions where allowed. You may complain to the Czech data-protection authority or another competent supervisory authority.

Optional data and automation

Required registration information and essential technical storage are needed to create or use an account. Public tools do not require registration. Optional language storage is not required for service access. We do not use automated decisions with legal or similarly significant effects; automated security limits protect service operation.

Device storage is explained in Cookies and local storage. Material processing changes will update this information; a new optional purpose requires an appropriate choice first.

Cloudflare and DNS

We use Cloudflare, Inc. for authoritative domain DNS. Checks on 15 October 2026 showed that office.karelkana.eu resolves directly to server s1; ordinary HTTP/HTTPS service traffic does not currently pass through the Cloudflare proxy. DNS provision may involve technical query data such as the queried domain and information about the requesting DNS resolver. Its DNS infrastructure is global, and technical data may be processed outside the EEA under the provider’s terms. See the Cloudflare privacy policy.