Privacy Policy | Panda-Core

Tools & Utilities

Privacy Policy

Data Protection & Your Rights under GDPR

This Privacy Policy explains what personal data Panda-Core collects, on what legal basis, for what purpose, and what rights you have regarding your data. It applies to all pages and tools on www.panda-core.net.

Last updated: August 15, 2026  |  Effective from: August 15, 2026

1. Controller & Contact

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Name: Panda-Core Admin
Address: Strømsø Torg 5 E, 3044 Oslo, Norway
Email: contact@panda-core.net
Website: https://www.panda-core.net

Data Protection Officer

A formally appointed Data Protection Officer (DPO) is not required for this website, as it does not meet the thresholds set out in Art. 37 GDPR (private individual, no large-scale systematic processing of sensitive data). For all privacy-related requests, please contact the controller directly at the email address above.

2. Data We Collect & Legal Bases

2.1 Server Access Logs

When you visit our website, our web server automatically records the following data in server log files:

  • IP address of the requesting device (anonymised after 7 days)
  • Date and time of the request
  • URL requested and referring URL (Referer)
  • Browser type and version, operating system
  • HTTP status code and bytes transferred

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a technically stable and secure website.
Retention: 14 days, then automatically deleted.

2.2 Contact Form

If you use the contact form, we collect the data you voluntarily provide (name, email address, message). This data is used solely to process and respond to your request and is not passed to third parties.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) and Art. 6(1)(f) GDPR (legitimate interest in answering user enquiries).
Retention: 3 years from last contact, or upon your request.

2.3 Developer Tools — Local Processing

The majority of our tools (CSS generators, JSON formatters, color tools, etc.) process the data you enter entirely within your browser (client-side). No content you enter into these tools is transmitted to or stored on our servers.

We do not sell, rent, or otherwise share your personal data with third parties for commercial purposes.

3. Video Downloader Tool

When you use the Video Downloader tool on this website, the following data is processed:

Data Purpose Legal Basis Retention
Video URL you enter Sent to our server to fetch video metadata and initiate download Art. 6(1)(b) GDPR — necessary to provide the service you requested Not persisted; processed in memory only
Temporary video/audio file Buffered server-side so you can download it to your device Art. 6(1)(b) GDPR Automatically deleted after max. 1 hour
Your IP address Rate limiting, abuse prevention, and server logging Art. 6(1)(f) GDPR — legitimate interest in preventing abuse 14 days in access logs
Download token One-time token to authenticate the file download request Art. 6(1)(b) GDPR Invalidated immediately after use or after 1 hour
Important — Copyright responsibility: You are solely responsible for ensuring that any content you download complies with the terms of service of the source platform and applicable copyright law. Panda-Core does not grant any rights to third-party content and does not store, host, or distribute such content permanently.

The tool accesses the requested video platform (e.g. YouTube, TikTok) on your behalf. Those platforms may set cookies or record requests independently. Their respective privacy policies apply to any data they collect.

4. Third-Party Services & External CDNs

To provide our website, we load certain resources from external Content Delivery Networks (CDNs). When your browser requests these resources, your IP address and browser information are transferred to the respective third-party server. This constitutes a transfer of personal data.

Service Provider Purpose Data transferred Legal basis Privacy Policy
Google Fonts Google LLC, USA Typography / font rendering IP address, browser info, referrer Art. 6(1)(f) GDPR Google Privacy
Font Awesome (cdnjs) Cloudflare Inc., USA Icons IP address, browser info Art. 6(1)(f) GDPR Cloudflare Privacy
Tailwind CSS Tailwind Labs / CDN provider CSS framework IP address, browser info Art. 6(1)(f) GDPR Tailwind Privacy
Alpine.js jsDelivr / Cloudflare JavaScript UI framework IP address, browser info Art. 6(1)(f) GDPR jsDelivr Privacy
jQuery Served from our own server JavaScript library None (no external request)

The legal basis for using these CDN services is our legitimate interest (Art. 6(1)(f) GDPR) in efficiently delivering our website. Where these providers are located outside the EU/EEA (e.g. USA), the transfer is covered by the EU-US Data Privacy Framework or Standard Contractual Clauses.

5. Google AdSense & Advertising

This website uses Google AdSense, an advertising service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and in the EU by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

Google AdSense uses cookies and web beacons to serve ads and measure their performance. It may use your browsing history across websites to display personalised advertisements. The following data may be processed:

  • Cookie identifiers and browser fingerprinting data
  • IP address (may be transferred to Google servers in the USA)
  • Browsing behaviour across websites using Google advertising
  • Approximate location (country/region level)
  • Clicks on and interactions with advertisements

Legal basis: Art. 6(1)(a) GDPR — your consent, given via our cookie consent mechanism on your first visit.

How to opt out:

Google's privacy policy: https://policies.google.com/privacy

No Traffic Distribution Systems (TDS): This website uses only legitimate Google AdSense advertising. We do not use Traffic Distribution Systems, hidden ad redirects, pop-up networks, malware distribution networks, or any other non-transparent monetisation systems. Clicking a download button on this site delivers a direct file download.

6. Cookies

Cookies are small text files placed on your device. We use the following categories:

Category Examples Purpose Duration Legal basis
Strictly Necessary Session cookies, CSRF tokens Required for website to function; cannot be disabled Session Art. 6(1)(f) GDPR — no consent required
Advertising Google AdSense cookies (e.g. __gads, IDE) Personalised advertising via Google AdSense Up to 13 months Art. 6(1)(a) GDPR — your consent required

Managing Cookies

You can withdraw your consent at any time or adjust cookie settings via our consent banner. You can also manage cookies directly in your browser:

Note: Blocking all cookies may impair some tool functionality.

7. Data Retention

Data type Retention period Reason
Server access logs (including IP) 14 days Security, abuse prevention
Temporary video downloader files Max. 1 hour Deleted automatically after download
Contact form submissions 3 years Statutory limitation period (§195 BGB)
Google AdSense advertising cookies Up to 13 months Set and managed by Google

We do not store personal data beyond these periods unless required to do so by law (e.g. tax or commercial retention obligations).

8. International Data Transfers

Some of the third-party services described in this policy (Google AdSense, Google Fonts, Cloudflare) transfer personal data to servers in the United States or other countries outside the European Economic Area (EEA).

Such transfers are lawful on the basis of:

  • EU-US Data Privacy Framework (DPF): Google LLC and Cloudflare Inc. are certified under the EU-US DPF, which the European Commission has deemed to provide an adequate level of protection (Commission Implementing Decision of 10 July 2023).
  • Standard Contractual Clauses (SCCs): Where DPF certification does not apply, transfers are covered by the SCCs approved by the European Commission under Art. 46(2)(c) GDPR.

9. Your Rights under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data:

Right of Access (Art. 15)

Request a copy of the personal data we hold about you and information on how it is processed.

Right to Rectification (Art. 16)

Request correction of inaccurate or incomplete personal data.

Right to Erasure (Art. 17)

Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.

Right to Restriction (Art. 18)

Request that we limit processing of your data in certain circumstances.

Right to Portability (Art. 20)

Receive your data in a structured, machine-readable format and transfer it to another controller.

Right to Object (Art. 21)

Object to processing based on legitimate interest (Art. 6(1)(f) GDPR) at any time.

Withdraw Consent (Art. 7(3))

Withdraw your consent (e.g. for advertising cookies) at any time without affecting prior processing.

No Automated Decisions (Art. 22)

We do not make decisions solely by automated means that would significantly affect you.

To exercise any of these rights, please contact us at: contact@panda-core.net. We will respond within 30 days. We may request proof of identity to protect your data from unauthorised access.

10. Right to Complain to a Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority at any time (Art. 77 GDPR). The supervisory authority responsible depends on the federal state of the controller's place of residence in Germany.

You can find the competent authority for your state at: https://www.bfdi.bund.de — List of German Data Protection Authorities

The Federal Commissioner for Data Protection and Freedom of Information (BfDI):

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Graurheindorfer Str. 153
53117 Bonn, Germany
www.bfdi.bund.de

If you reside in another EU/EEA country, you may also lodge a complaint with the supervisory authority of your country of residence.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our services, data practices, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We recommend reviewing this policy periodically.

Your continued use of this website after changes are published constitutes your acknowledgement of the revised policy.

Last updated: August 15, 2026