Privacy Policy | Panda-Core
This Privacy Policy explains what personal data Panda-Core collects, on what legal basis, for what purpose, and what rights you have regarding your data. It applies to all pages and tools on www.panda-core.net.
Last updated: August 15, 2026 | Effective from: August 15, 2026
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Name: Panda-Core Admin
Address: Strømsø Torg 5 E, 3044 Oslo, Norway
Email: contact@panda-core.net
Website: https://www.panda-core.net
A formally appointed Data Protection Officer (DPO) is not required for this website, as it does not meet the thresholds set out in Art. 37 GDPR (private individual, no large-scale systematic processing of sensitive data). For all privacy-related requests, please contact the controller directly at the email address above.
When you visit our website, our web server automatically records the following data in server log files:
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a
technically stable and secure website.
Retention: 14 days, then automatically deleted.
If you use the contact form, we collect the data you voluntarily provide (name, email address, message). This data is used solely to process and respond to your request and is not passed to third parties.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) and
Art. 6(1)(f) GDPR (legitimate interest in answering user enquiries).
Retention: 3 years from last contact, or upon your request.
The majority of our tools (CSS generators, JSON formatters, color tools, etc.) process the data you enter entirely within your browser (client-side). No content you enter into these tools is transmitted to or stored on our servers.
When you use the Video Downloader tool on this website, the following data is processed:
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Video URL you enter | Sent to our server to fetch video metadata and initiate download | Art. 6(1)(b) GDPR — necessary to provide the service you requested | Not persisted; processed in memory only |
| Temporary video/audio file | Buffered server-side so you can download it to your device | Art. 6(1)(b) GDPR | Automatically deleted after max. 1 hour |
| Your IP address | Rate limiting, abuse prevention, and server logging | Art. 6(1)(f) GDPR — legitimate interest in preventing abuse | 14 days in access logs |
| Download token | One-time token to authenticate the file download request | Art. 6(1)(b) GDPR | Invalidated immediately after use or after 1 hour |
The tool accesses the requested video platform (e.g. YouTube, TikTok) on your behalf. Those platforms may set cookies or record requests independently. Their respective privacy policies apply to any data they collect.
To provide our website, we load certain resources from external Content Delivery Networks (CDNs). When your browser requests these resources, your IP address and browser information are transferred to the respective third-party server. This constitutes a transfer of personal data.
| Service | Provider | Purpose | Data transferred | Legal basis | Privacy Policy |
|---|---|---|---|---|---|
| Google Fonts | Google LLC, USA | Typography / font rendering | IP address, browser info, referrer | Art. 6(1)(f) GDPR | Google Privacy |
| Font Awesome (cdnjs) | Cloudflare Inc., USA | Icons | IP address, browser info | Art. 6(1)(f) GDPR | Cloudflare Privacy |
| Tailwind CSS | Tailwind Labs / CDN provider | CSS framework | IP address, browser info | Art. 6(1)(f) GDPR | Tailwind Privacy |
| Alpine.js | jsDelivr / Cloudflare | JavaScript UI framework | IP address, browser info | Art. 6(1)(f) GDPR | jsDelivr Privacy |
| jQuery | Served from our own server | JavaScript library | None (no external request) | — | — |
The legal basis for using these CDN services is our legitimate interest (Art. 6(1)(f) GDPR) in efficiently delivering our website. Where these providers are located outside the EU/EEA (e.g. USA), the transfer is covered by the EU-US Data Privacy Framework or Standard Contractual Clauses.
This website uses Google AdSense, an advertising service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and in the EU by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Google AdSense uses cookies and web beacons to serve ads and measure their performance. It may use your browsing history across websites to display personalised advertisements. The following data may be processed:
Legal basis: Art. 6(1)(a) GDPR — your consent, given via our cookie consent mechanism on your first visit.
How to opt out:
Google's privacy policy: https://policies.google.com/privacy
Cookies are small text files placed on your device. We use the following categories:
| Category | Examples | Purpose | Duration | Legal basis |
|---|---|---|---|---|
| Strictly Necessary | Session cookies, CSRF tokens | Required for website to function; cannot be disabled | Session | Art. 6(1)(f) GDPR — no consent required |
| Advertising | Google AdSense cookies (e.g. __gads, IDE) |
Personalised advertising via Google AdSense | Up to 13 months | Art. 6(1)(a) GDPR — your consent required |
You can withdraw your consent at any time or adjust cookie settings via our consent banner. You can also manage cookies directly in your browser:
Note: Blocking all cookies may impair some tool functionality.
| Data type | Retention period | Reason |
|---|---|---|
| Server access logs (including IP) | 14 days | Security, abuse prevention |
| Temporary video downloader files | Max. 1 hour | Deleted automatically after download |
| Contact form submissions | 3 years | Statutory limitation period (§195 BGB) |
| Google AdSense advertising cookies | Up to 13 months | Set and managed by Google |
We do not store personal data beyond these periods unless required to do so by law (e.g. tax or commercial retention obligations).
Some of the third-party services described in this policy (Google AdSense, Google Fonts, Cloudflare) transfer personal data to servers in the United States or other countries outside the European Economic Area (EEA).
Such transfers are lawful on the basis of:
Under the General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data:
Request a copy of the personal data we hold about you and information on how it is processed.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
Request that we limit processing of your data in certain circumstances.
Receive your data in a structured, machine-readable format and transfer it to another controller.
Object to processing based on legitimate interest (Art. 6(1)(f) GDPR) at any time.
Withdraw your consent (e.g. for advertising cookies) at any time without affecting prior processing.
We do not make decisions solely by automated means that would significantly affect you.
To exercise any of these rights, please contact us at: contact@panda-core.net. We will respond within 30 days. We may request proof of identity to protect your data from unauthorised access.
You have the right to lodge a complaint with the competent data protection supervisory authority at any time (Art. 77 GDPR). The supervisory authority responsible depends on the federal state of the controller's place of residence in Germany.
You can find the competent authority for your state at: https://www.bfdi.bund.de — List of German Data Protection Authorities
The Federal Commissioner for Data Protection and Freedom of Information (BfDI):
Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)If you reside in another EU/EEA country, you may also lodge a complaint with the supervisory authority of your country of residence.
We reserve the right to update this Privacy Policy at any time to reflect changes in our services, data practices, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We recommend reviewing this policy periodically.
Your continued use of this website after changes are published constitutes your acknowledgement of the revised policy.
Last updated: August 15, 2026