Privacy Policy
Effective date: 3 June 2026
brevio is built on a simple principle: your files never leave your browser. This policy explains the narrow category of data we do handle and the rights you have over it.
1. Data Controller
The data controller for brevio.pro is the individual operator of this service, based in Vienna, Austria (EU). Contact: legal@brevio.pro.
2. Data We Do Not Collect
When you use any tool on brevio.pro — PDF tools, image tools, calculators, converters, games, or any other tool — your files are processed exclusively by your browser's JavaScript engine. No file content, document data, image data, or metadata derived from your files is ever transmitted to our servers. Our server infrastructure has no endpoint designed or capable of receiving file content.
We do not collect: personal identifiers, names, email addresses, passwords, payment information, or any account data. The Service requires no registration and holds no user accounts.
3. Data We Do Collect
3.1 Analytics (consent-required)
If you explicitly accept analytics via our banner, we use Plausible Analytics to collect anonymised, aggregate usage statistics. Plausible is a privacy-first analytics provider with EU-based infrastructure. It does not use cookies, does not collect or store IP addresses, does not fingerprint your device, and does not share data with third parties or advertising networks.
Data Plausible collects includes:
- Page URL visited
- HTTP referrer (the URL you came from)
- Country (derived from your IP address at the time of request; the IP address itself is not stored or logged)
- Browser type and version
- Operating system
- Device category (desktop, mobile, tablet)
This data is aggregated at the time of collection. It cannot be used to identify you as an individual. If you decline analytics, no analytics script fires and no data reaches Plausible.
3.2 Consent preference (local storage)
We store your analytics consent choice in your browser's localStorage under the key brevio-consent. This data is stored entirely on your device. We cannot read it and it is never transmitted to us.
3.3 Server access logs (Vercel)
Our hosting provider, Vercel Inc., may generate standard server-access logs including IP address, timestamp, URL path, HTTP status code, and user-agent string when your browser fetches pages, assets, or our API endpoints. These logs are generated and controlled by Vercel, not by us, and are subject to Vercel's Privacy Policy. We do not have routine access to these logs. Vercel retains them for a limited period for security and abuse prevention.
4. Legal Basis for Processing
Analytics (Plausible): your explicit consent, pursuant to GDPR Article 6(1)(a). You may withdraw consent at any time by clearing your browser's localStorage for brevio.pro (open your browser's developer tools → Application → Local Storage → delete the brevio-consent key) and reloading the page. Withdrawal does not affect the lawfulness of processing before withdrawal.
Advertising (Google AdSense): your explicit consent via the Funding Choices CMP, pursuant to GDPR Article 6(1)(a) and the IAB TCF 2.x framework.
Vercel access logs: legitimate interest in operating, securing, and maintaining the Service (GDPR Article 6(1)(f)), limited to the minimum retention period required for security monitoring.
5. How We Use Data
Aggregated Plausible analytics data is used solely to understand usage patterns (which tools are popular, which geographies use the Service) and to improve the Service. We do not use it for advertising, behavioural profiling, or any purpose beyond Service improvement.
We do not sell, rent, or trade your data to any third party. Ever.
6. Third-Party Data Processors
| Processor | Purpose | Location |
|---|---|---|
| Plausible Analytics | Privacy-friendly site analytics (consent-required) | EU |
| Vercel Inc. | Hosting, edge CDN, static asset delivery | US / EU edge |
| Google AdSense / Funding Choices | Advertising (consent-managed via IAB TCF 2.x CMP) | US / EU |
7. Cookies & Consent Management
We do not set any first-party cookies. With your consent, our advertising partner Google may set third-party cookies for ad personalisation and measurement. Our consent banner uses localStorage, not cookies. Plausible Analytics does not use cookies. If you have accepted analytics and any future advertising partner requires cookies, we will obtain your explicit prior consent before setting them.
Ad consent for EEA visitors is managed by Google Funding Choices, an IAB TCF 2.x certified Consent Management Platform. You can review or withdraw your ad consent preferences at any time using the “Privacy settings” link in the footer.
8. International Data Transfers
Plausible Analytics' infrastructure is located in the EU/EEA; no international transfer occurs for analytics data. Vercel operates a global edge network; requests may be served by nodes outside the EU/EEA. Since no personal file content is involved and standard access log data is minimal, the privacy impact of any such transfer is low. We rely on Vercel's Standard Contractual Clauses with the European Commission and applicable adequacy decisions for any transfers.
9. Data Retention
Plausible aggregated analytics data is retained for the duration of our subscription to Plausible, after which it is deleted. Your localStorage consent preference remains on your device until you clear it. Vercel access logs are retained per Vercel's own retention policy (typically a short rolling window).
10. Children's Privacy
The Service is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe that a child under 16 has provided personal data to us, please contact us at legal@brevio.pro and we will take steps to delete such data promptly.
11. Your GDPR Rights
Under the General Data Protection Regulation (GDPR), if we process personal data about you, you have the following rights:
- Right of access — to obtain confirmation of whether we process personal data about you and, if so, to receive a copy.
- Right to rectification — to have inaccurate personal data corrected.
- Right to erasure — to request deletion of your personal data where there is no lawful basis for continued processing.
- Right to restriction — to request that we restrict processing under certain conditions.
- Right to data portability — to receive personal data you have provided to us in a structured, commonly used, machine-readable format.
- Right to object — to object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.
Because we collect no personal data relating to files or user identity, and because analytics data is non-personal and aggregated, most of these rights have limited practical application for our Service. You may exercise any right by contacting us at legal@brevio.pro.
You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, DSB) at dsb.gv.at if you believe we have infringed your rights under applicable data protection law.
12. Advertising
We use Google AdSense (publisher ID: ca-pub-5928216994039002) to display advertisements on brevio.pro. Ad personalisation and consent management is handled by Google Funding Choices, which acts as our IAB TCF 2.x Consent Management Platform (CMP). When you first visit the site, Funding Choices presents you with a consent dialogue for ad personalisation. You may withdraw or change your ad consent choices at any time by clicking Privacy settings in the page footer.
If you decline personalised ads, Google will serve contextual ads only — based on the content of the page, not your browsing history or personal profile. No behavioural tracking cookies are set without your explicit consent via the Funding Choices CMP.
Google's use of advertising data is governed by the Google Privacy Policy.
13. Security
The Service is served exclusively over HTTPS. Because no personal file data reaches our servers, the attack surface for a data breach involving your files is zero by design. Aggregate Plausible analytics data is stored within Plausible's EU infrastructure and subject to Plausible's own security controls.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the Service, applicable law, or our data practices. Material changes will be reflected in an updated effective date at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.
15. Contact
For privacy enquiries or to exercise your GDPR rights, contact us at legal@brevio.pro.
For general enquiries about the Service, use the same address.