On this page
1. Introduction
Pockenta Tools is an online platform offering digital utilities that help individuals and businesses complete everyday tasks, process information, work with files, and generate useful results. This Privacy Policy applies to pockenta.com and the services provided through it.
This policy explains the information involved in using our services, the purposes for handling it, relevant recipients, retention and safeguards, and the choices and rights available to you. Specific notices associated with an interaction provide additional information where needed; they do not replace the protections described here.
2. Who we are
Pockenta Tools is operated by SCRIPT WIND (PVT) LTD, registered in Sri Lanka under registration number PV 00351070, and powered by Script Wind. In this policy, “we”, “us” and “our” refer to that operator. Where applicable, we act as the controller for decisions about the purposes and means of personal-information processing under our responsibility.
Our privacy contact is developer@scriptwind.com. You can use this address for privacy questions, complaints and applicable rights requests. Our studio website is scriptwind.com. Cloudflare is an infrastructure provider, not the operator of Pockenta.
3. Information we process
The information involved depends on your interaction with the service. Providing information to a utility does not by itself mean that our team receives or retains every input. We distinguish information available to us from technical information handled by infrastructure providers.
Content and files you process (Client-Side)
Our image tools—including Image Compressor, Image Resizer, Image Converter, Image Cropper, Image Rotator, and Image Watermark—operate entirely in your client web browser using Web Workers and the HTML Canvas API. Your image files, photographs, text watermarks, and generated outputs are never transmitted over the internet to our servers or stored in any cloud storage or database. EXIF metadata is stripped locally upon canvas re-encoding.
Consented product analytics and usage measurement
Only if you provide explicit opt-in consent via our Cookie Preferences interface, we collect pseudonymous website and feature usage statistics using Google Analytics 4 (Measurement ID: G-54CJHP6ZMR) and Cloudflare Web Analytics.
Consented analytics include: visited page URLs, referral sources, coarse geographic region (derived from IP; IP addresses are anonymized and not stored in full), browser and device categories, and product lifecycle events across our image tools (e.g. tool initiated, processing outcome success or failure, processing duration bucket, and download types).
We strictly prohibit sending sensitive parameters to analytics. Image files, pixel data, thumbnail previews, original filenames, generated filenames, custom watermark text, and email addresses are NEVER tracked or sent to Google Analytics.
Technical requests and security information
Visiting the website sends technical requests to delivery infrastructure. Providers can process IP addresses, requested URLs, request times, browser or user-agent details, connection and routing information, and relevant error or security signals. Approximate location may be inferred from network information; we do not request precise device location. Information available to a provider is not necessarily available to or retained by our team.
Communications
When you email us, the correspondence can contain your sender address, name, message, attachments and diagnostic information you choose to include. Email services involved in delivery and the people handling your inquiry receive this information. Avoid sending passwords, identity documents or sensitive attachments unless an appropriate process has been agreed.
4. How we use information
Information and content you provide are handled as necessary to perform the operation you request and deliver useful results. Processing may involve our infrastructure and authorized service providers where relevant to the interaction. Access, use and retention are limited to the applicable purpose and legal requirements.
- Process inputs, apply your chosen options, generate results and facilitate downloads locally in your browser.
- Deliver and maintain the website and the resources needed to provide its services.
- Measure website traffic, tool performance, and error frequencies using aggregated analytics (only when explicit consent has been granted).
- Respond to inquiries, support requests, privacy requests and reported problems.
- Troubleshoot errors, support availability, prevent abuse and protect systems where relevant operational information is available.
- Meet applicable legal obligations and address valid legal requests or genuine disputes.
5. User-provided content
You retain ownership of the rights you hold in your submissions. We do not acquire ownership merely because you use Pockenta. Content is handled for your requested purpose and any separately disclosed, lawful operational purpose, rather than for unrestricted publication or commercial exploitation.
You are responsible for having appropriate rights and permissions for information you provide, including personal information relating to other people. Do not submit more information than the task requires. We do not use your submitted content to train AI models or sell it as a content library.
Content accessible to the operator, such as an attachment sent in a support inquiry, is handled in connection with the relevant purpose and with reasonable confidentiality and security. Not every input is necessarily accessible to our team. Availability of a result is not a promise of permanent storage, and deletion or retention depends on the applicable purpose, notice and legal requirements.
7. Hosting, Cloudflare and infrastructure security
Cloudflare supports the website’s hosting and delivery infrastructure. Delivering pages and resources over HTTPS involves technical connection and request information. Configured services may also support caching, performance, availability, network security, abuse prevention and operational diagnostics.
The particular information handled and made available to us depends on the services configured and their role. Cloudflare describes its practices in its own privacy policy. That policy does not replace our responsibilities, make Cloudflare the owner of Pockenta or guarantee complete legal compliance or protection against attacks.
8. Service providers and other recipients
Information may be handled by providers supporting the relevant operation, delivery, security or communication. Cloudflare provides website infrastructure. Email services support delivery and receipt of correspondence. Our team and any provider assisting with a support issue should receive only the information reasonably necessary for that purpose.
Where analytics consent is granted, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) receives pseudonymous usage metrics through Google Analytics 4. IP anonymization is enforced.
We do not sell, rent, or trade your personal information. Information may also be disclosed to competent authorities or other recipients where a binding legal obligation, valid legal process or lawful response to an actual security incident or claim requires it.
9. Legal grounds for processing
Where GDPR or UK GDPR applies, the legal ground depends on the activity:
- Consent (Art. 6(1)(a) GDPR / ePrivacy Directive): Consent is the sole legal basis for optional analytics cookies and product usage measurement. You can refuse or withdraw consent at any time without restricting your access to any tool or service.
- Contractual necessity (Art. 6(1)(b) GDPR): Applies to executing the operations you request directly on the site.
- Legitimate interests (Art. 6(1)(f) GDPR): Supports essential and proportionate website operation, network security, abuse prevention, and responding to direct inquiries.
- Legal obligation (Art. 6(1)(c) GDPR): Compliance with applicable statutory requirements.
10. Information retention
We limit retention to what is reasonably needed for the relevant service, operational purpose or legal requirement. The criteria include the nature of the interaction, time needed to fulfil it and resolve follow-up matters, security risks, applicable recordkeeping duties and any genuine dispute or legal hold.
- User files and images: 0 seconds retention on our servers. Processing takes place in memory on your local device.
- Cookie consent preferences: Stored locally in your browser for up to 12 months unless cleared by you earlier.
- Analytics data: When consented, Google Analytics 4 retains pseudonymous event data for 2 months (or up to the standard property retention window of 14 months) before automatic deletion.
- Support and privacy correspondence: Retained as reasonably needed to respond, document resolution, address follow-up or meet a relevant legal obligation.
- Technical server and security logs: Retained by edge infrastructure providers in accordance with their standard operational and security retention schedules.
11. Information security
We use reasonable safeguards appropriate to the information and activity, including HTTPS for website connections and validation and resource restrictions intended to reduce unsafe or abusive processing. Access to information available to our team should be limited to the relevant service, support, security or legal purpose.
No website, device, communication channel or service provider can guarantee absolute security. Use a trusted device and up-to-date software, protect your copies of important information, and avoid sending unnecessary sensitive material in an inquiry. Where an incident triggers a legal notification duty, the applicable process and timing govern the response.
12. International data handling
Our website infrastructure and communications can involve providers or personnel in more than one country. Relevant technical information or correspondence may therefore be processed outside your country, where privacy laws can differ.
Where applicable law restricts a transfer, the relevant conditions and safeguards must be met. For Google Analytics, Google relies on standard contractual clauses and the EU-U.S. Data Privacy Framework where applicable. You can contact us to request information about locations, recipients and safeguards relevant to information we hold about you.
13. Your privacy rights
Rights depend on the law that applies and any lawful exceptions. They can include confirmation of processing, access, correction, deletion, restriction, portability, information about recipients, objection to certain uses, and withdrawal of consent. Withdrawal does not undo processing that was lawful before it was withdrawn.
Applicable law may also provide opt-outs from specified sale, sharing, targeted advertising or profiling, and a right to complain to a competent authority. We do not use automated profiling to make decisions about users with legal or similarly significant effects.
14. Regional privacy protections
You can contact us from any country. Statutory rights, coverage thresholds, lawful grounds and complaint procedures differ; the following protections apply only where the relevant law covers the operator and activity.
- European Union / EEA and United Kingdom: GDPR or UK GDPR can provide the rights described above, objections to legitimate-interest processing and complaints to a supervisory authority, including the ICO in the UK. Rules for cookies and similar technologies apply separately with prior opt-in consent.
- United States: applicable state law can provide access, correction, deletion, portability, authorized-agent requests, appeals where provided and protection against unlawful discrimination. We do not sell personal information or share it for cross-context behavioral advertising. Where applicable, we honor Global Privacy Control and other legally recognized opt-out signals.
- Brazil: where LGPD applies, rights can include confirmation, access, correction, recipient information, anonymization, blocking, deletion, portability and consent-related requests, subject to legal conditions.
- Canada: relevant federal or provincial law can provide meaningful-consent protections, access and correction, and a way to challenge handling practices with the responsible organization or privacy commissioner.
- Australia: where the Privacy Act and Australian Privacy Principles apply, you may seek access or correction and raise a privacy complaint. An unresolved complaint may be taken to the OAIC.
- Oman: where Royal Decree 6/2022 and Ministerial Decision 34/2024 apply, consent, copy, correction, transfer, deletion and notification protections are subject to the law and regulations. MTCIT is the relevant authority.
- Sri Lanka: rights and duties under Act No. 9 of 2022, as amended, depend on commencement orders. As of the review date, the DPA’s notice identifies 1 January 2027 for sections 2 and 3, Part I and Part III; Part II rights and Part VII penalties are not yet active. Uncommenced statutory rights are not presented here as already enforceable. You can still contact us about your information.
15. Children’s privacy
Pockenta is a general-purpose utility platform and is not designed to solicit children’s personal information. A child’s information requires appropriate care and any permissions required by applicable law. Where local law requires a parent’s or guardian’s permission or supervision, obtain it before using the services.
A parent, guardian or concerned user can contact us about a child’s information available to the operator, including information supplied in a message. We assess the circumstances and take steps required by applicable child-protection law, including deletion or appropriate consent where required.
16. External websites
Links can lead to independently operated websites, including Script Wind, Cloudflare and regulators. Visiting those sites can disclose connection information to their operators. Their policies govern their information handling; this policy does not automatically cover an external destination. Review its notice before providing information.
17. Changes to this policy
We update this policy when needed to reflect information practices or applicable requirements. Revisions are published at this address, and the manually maintained date above identifies the reviewed version. Material changes receive any additional notice or permission required by law.
A revision does not itself authorize an unrelated use of previously collected information. We do not promise individual email notices where we have no contact details or legal basis to send them. Review the published policy when you use the service.
18. Contact
For a privacy question, complaint or applicable rights request, email developer@scriptwind.com with the subject “Pockenta Tools - Privacy Request”. Describe the relevant interaction and the outcome you seek without unnecessarily attaching sensitive information.
We may need to distinguish information held by the operator from information handled independently by a provider and explain an appropriate request route. Contacting us does not restrict any statutory complaint or remedy.