Privacy Policy
Last updated: 18 October 2026 · Effective: 18 October 2026
1. Who is responsible
This policy explains what personal data Viking Tools ("we") handles when you visit vikingtools.eu, why, and what rights you have. Operator: Maksym Sokolov, Spain. Contact for privacy questions and requests: support@vikingtools.eu.
2. What we handle, and what we do not
What we handle
- Hosting data. The site is hosted on Firebase Hosting (Google Cloud). Like any web server, it processes technical data such as your IP address, browser type and the time and address of each request in order to deliver and secure the site.
- Messages you send us. If you email support@vikingtools.eu, we use your address and message only to reply.
- Your consent choice. Stored on your device so we know what you allowed.
- Statistics, if you allow them: see Statistics.
- Advertising data, if you allow it: see Advertising.
What we do not handle
- Your sign text. The sign editor runs in your browser. What you type is not sent to us or to anyone else.
- No accounts, passwords or profiles.
- No payment details. Donations are handled by Ko-fi or Buy Me a Coffee, not by us.
- No precise location, and we do not sell personal data for money.
3. What is stored on your device
The site keeps the following in your browser. Items needed for a feature you use stay on your device, are never sent to us and are not used to identify you. You can remove all of it by clearing the site's data in your browser.
| Name | What it is for | How long | Needs your consent |
|---|---|---|---|
| vt-theme | What it is forRemembers your light or dark theme. | How longUntil you clear site data | Needs your consentNo: needed for a feature you use |
| vt-sign-editor:* | What it is forKeeps the sign editor’s draft, saved signs and recently used colors. | How longUntil you clear site data | Needs your consentNo: needed for a feature you use |
| vt-consent | What it is forYour consent choice and the date you made it, so you are not asked on every page. | How longUp to 13 months | Needs your consentNo: it records your choice |
| _ga, _ga_<ID> | What it is forA random identifier used for Google Analytics statistics. | How longUp to 13 months | Needs your consentYes, where the law requires it |
| __gads, __gpi | What it is forAd delivery, limiting how often you see the same ad, and fraud prevention (Google AdSense). | How longSet by Google; see its policy | Needs your consentYes, where the law requires it |
4. Statistics (Google Analytics)
With your consent where the law requires it, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how many people use the site and which pages and tools are useful. Google acts as our processor.
- What is collected: pages you view, the page you came from, approximate location (country or city, derived from your IP address; Google does not store IP addresses for visitors in the EU), device, browser and operating system type, screen size, language, and interactions such as scrolling, outbound link clicks and time on page.
- Limits we set: Google signals and ad personalisation are turned off, and statistics data is not used for advertising. Event data is deleted after 2 months.
5. Advertising (Google AdSense)
Some pages show ads, marked "Advertisement", which help keep the site free. They are provided by Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). For advertising, Google acts as an independent controller, under its own privacy policy.
- When ads load: ads are not shown to visitors in the European Economic Area, the United Kingdom or Switzerland (as judged by the time-zone check described in Your choices), so no advertising code loads for them. Elsewhere, ads load by default; you can turn them off with a Global Privacy Control signal, in your browser settings or, where the "Privacy settings" link is shown in the footer, there.
- What is collected: Google and its ad technology partners may use cookies and process your IP address and device data to deliver and measure ads, limit how often you see the same ad, and prevent fraud.
- More information: how Google uses information from sites that use its services, and My Ad Center to manage ad personalisation in your Google account.
6. Your choices and consent
If you visit from the European Economic Area, the United Kingdom or Switzerland, a banner at the bottom of the page asks whether you allow statistics and advertising. Until you choose, and if you say no, the site loads no analytics or advertising code and sets no cookies for them. You can say no as easily as yes.
To decide whether to ask, the site checks your browser's time zone. This check runs only on your device and nothing about it is sent to us or anyone else. If the time zone is European, unknown or generic, we treat you as a visitor from those regions. The banner is part of this site; no third party is contacted to show it.
Where the "Privacy settings" link is shown in the footer, use it to change your choice. When you withdraw consent, the site removes the statistics and advertising cookies set on this site and reloads the page without them. Withdrawing does not affect processing that happened before. You can also block or delete cookies in your browser settings.
Outside the European Economic Area, the United Kingdom and Switzerland no banner is shown and statistics and advertising load by default; where the "Privacy settings" link is shown in the footer you can turn them off there. If your browser sends a Global Privacy Control signal, we treat it as a refusal: statistics and advertising load only if you actively allow them.
7. Third parties and links
- Firebase Hosting (Google Cloud) delivers the site and acts as our processor under Google's data processing terms.
- Google provides statistics and advertising as described above.
- Ko-fi and Buy Me a Coffee. The header links to these sites so you can support the project. We do not process donations or receive your payment details; their own terms and privacy policies apply once you leave this site.
- Other links lead to sites we do not control, which have their own policies.
8. Legal bases and how long we keep data
| Data | Legal basis | How long we keep it |
|---|---|---|
| Hosting data | Legal basisLegitimate interest in running a secure website (Art. 6(1)(f) GDPR) | How long we keep itAs long as our hosting provider needs it to deliver and secure the site |
| Emails you send us | Legal basisLegitimate interest in answering you (Art. 6(1)(f) GDPR) | How long we keep itUntil the conversation is no longer needed |
| Theme, draft and saved signs on your device | Legal basisNeeded for a feature you asked for | How long we keep itUntil you clear site data; we never receive it |
| Your consent choice | Legal basisLegal obligation to ask for and prove consent (Art. 6(1)(c) and Art. 7(1) GDPR) | How long we keep itUp to 13 months, then you are asked again |
| Statistics | Legal basisYour consent (Art. 6(1)(a) GDPR) | How long we keep itCookies up to 13 months; event data deleted after 2 months |
| Advertising | Legal basisYour consent where the law requires it; elsewhere ads load unless you turn them off | How long we keep itUnder Google’s own retention rules (see Google’s policy) |
9. Transfers between countries
The site is served from Google's global network, so data such as your IP address may be processed in countries other than your own, including the United States. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision, together with the UK Extension and the Swiss-US framework; Google also relies on standard contractual clauses.
10. Your rights by region
Wherever you live, you can ask us what we hold about you and to correct or delete it. The table shows the rights some laws add and who oversees them. Where processing is based on your consent, you can withdraw it at any time.
| Region | Law | Your rights | Who you can complain to |
|---|---|---|---|
| EEA, United Kingdom, Switzerland | LawGDPR, UK GDPR, Swiss FADP | Your rightsAccess, correction, deletion, restriction, a portable copy, objection to processing based on legitimate interests, and withdrawal of consent. | Who you can complain toYour national data-protection authority. For Spain, the AEPD (aepd.es). |
| California and other US states | LawCCPA/CPRA and state privacy laws | Your rightsKnow what is collected, delete, correct, opt out of sale or sharing and of targeted advertising, and not be treated worse for using these rights. We do not sell personal data for money, and we offer no financial incentives for using these rights. Where ads are shown, Google’s ad cookies may count as “sharing” under some state laws; you can opt out with a Global Privacy Control signal or your browser settings. | Who you can complain toYour state attorney general or privacy regulator. |
| Brazil | LawLGPD | Your rightsConfirmation that data is processed, access, correction, anonymisation or deletion, portability, information about who data is shared with, and revoking consent. | Who you can complain toANPD (gov.br/anpd). |
| Canada | LawPIPEDA, Quebec Law 25 | Your rightsAccess, correction, withdrawing consent, and challenging our compliance. | Who you can complain toOffice of the Privacy Commissioner of Canada; in Quebec, the Commission d’accès à l’information. |
| Australia | LawPrivacy Act 1988 | Your rightsAccess, correction, and making a complaint. | Who you can complain toOAIC (oaic.gov.au). |
| Japan | LawAPPI | Your rightsDisclosure, correction, deletion, and ceasing use of your data. | Who you can complain toPersonal Information Protection Commission (ppc.go.jp). |
| South Korea | LawPIPA | Your rightsAccess, correction, deletion, and suspension of processing. | Who you can complain toPersonal Information Protection Commission (pipc.go.kr). |
| India | LawDPDP Act 2023 | Your rightsAccess, correction, erasure, grievance redress, and nominating someone to exercise your rights. | Who you can complain toData Protection Board of India. |
| Everywhere else | LawThe law where you live | Your rightsWhatever rights your local law gives you. We will honour them. | Who you can complain toYour local data-protection authority, if there is one. |
To use a right, email support@vikingtools.eu. We may ask you to confirm who you are, we answer within 30 days (longer only where the law allows and after telling you why), and we do not charge for it. Because we hold so little, we often will have nothing about you beyond ordinary server logs and any emails you sent. You may also complain to the supervisory authority in your country.
11. Security
The site is served over HTTPS, has no accounts or database, and keeps as little data as possible. If a breach ever affected your personal data, we would tell you and the authorities as the law requires.
12. Children
The site is not directed at children, and we do not knowingly collect their personal data. The age at which a child can consent online varies (13 in the US, 14 in Spain, 16 under the GDPR default unless a country sets a lower age). If you are a parent and believe your child has sent us personal data, email support@vikingtools.eu and we will delete it. In Brazil the LGPD requires the best interests of the child to be considered and a parent's consent for children's data.
13. Changes
We will update this page when our data handling changes and change the dates at the top. For material changes we will change the dates at the top and record the change in the list below. See also our Terms of Use.
- 18 October 2026. Rewritten for visitors worldwide: rights by region, a table of everything stored on your device, clearer rules for the text you put on signs, and this changelog.
- 12 October 2026. Earlier policy, written around the GDPR, covering statistics, ads and the consent choice.
14. Language
If this policy is translated, the English version prevails.