Privacy you can verify, not just trust.
Vastiko processes every file entirely inside your browser. There is no upload step, no temporary server-side storage, no telemetry on your file content.
0 BYTES
Of your file content are transmitted to our servers.
0 ACCOUNTS
You don't need to register or sign in to use any tool.
0 AD COOKIES
No advertising or retargeting cookies. Only standard analytics cookies.
Who we are
Vastiko is operated by an independent developer registered as an OSVČ (sole trader) in the Czech Republic. The website is served from a cloud-hosted web server that delivers the static HTML, CSS, and JavaScript that runs in your browser. It does not, and technically cannot, receive your file content.
What 'runs entirely in your browser' means
Every tool on Vastiko — Edit PDF, Compress, Merge, Split, Convert, Passport Photo, Unlock — performs its work using JavaScript executed by your browser. When you drop a file:
- The file is loaded into the memory of the browser tab.
- The tool reads, modifies, or extracts data inside that tab.
- The result is written back to memory and offered to you as a download.
- When you close or reload the tab, the file and all its derivatives are discarded.
You can verify this yourself: open your browser's DevTools, switch to the Network tab, then drop a file. No request is made to upload it. The only network traffic is the initial page load and (if enabled) anonymous analytics pings that contain no file content.
What we do collect
Aggregate analytics (Google Analytics 4)
We use Google Analytics 4 to count page views, visitor country, and which tool buttons get clicked. This tells us, for example, that 1,200 people compressed a PDF on Tuesday — not what was in those PDFs. GA4 collects IP addresses (which Google anonymizes server-side), browser type, device class, and behavior events. None of these touch your file content because file content never leaves your device.
If you object to this aggregate collection, you can block it via your browser's tracking protection or extensions like uBlock Origin. The tools will still work.
Cookies set by GA4
Google Analytics 4 sets the following cookies in your browser:
_ga— anonymous client identifier (2-year lifetime)_ga_LB17YX6X89— per-stream session/event tracking (2-year lifetime)
These cookies do not store any file content, file names, or personally identifying information. They only let GA4 deduplicate visitors across sessions.
Server logs
Our hosting provider keeps standard web-server access logs (IP address, requested URL, timestamp, user agent) with minimal retention for abuse prevention and capacity planning. These logs do not contain any file content because no file content reaches the server.
Things we do NOT collect
- Your file content, file names, file sizes, or file metadata
- The text inside your PDFs, images, or spreadsheets
- Any persistent identifier tied to you across sessions beyond the GA4 cookies above (no fingerprinting)
- Email addresses, payment details, or any account data — we don't have accounts
- Advertising or retargeting cookies — we run no ads at this time
Third parties
The following third-party services are loaded by your browser when you visit Vastiko:
- Google Fonts — to render the Manrope typeface. Google receives your IP address as part of any normal HTTP request.
- Google Analytics 4 — aggregate page-view counts as described above.
We do not share, sell, or transfer any data to other third parties.
Children
Vastiko is not directed at children under 13. Because we do not collect personal data tied to identifiable users, we do not knowingly process data of minors.
Your rights (GDPR / CCPA)
Because we do not store personal data tied to you, traditional rights of access, deletion, or portability have nothing to act on. The strongest privacy guarantee we offer is structural: there is no database to query.
You may still:
- Opt out of Google Analytics tracking using the official browser add-on or any tracker blocker.
- Clear our analytics cookies via your browser settings.
- Contact us at info [at] vastiko [dot] com with any concern; we'll respond within 30 days.
Changes to this policy
If we materially change how Vastiko handles privacy, we'll update this page and bump the version number at the top. Because the architecture (everything in your browser) is the foundation of the service, no future change will introduce server-side file processing without a clear announcement.
Contact
Privacy questions: info [at] vastiko [dot] com
Anything else: info [at] vastiko [dot] com