Privacy Policy

Introduction

At Uddatak, we respect your privacy. This page explains transparently how we handle your data and files when you use our tools. It describes the platform's actual current state, and we'll update it as soon as any feature changes that.

Local tools (the large majority of tools)

Most tools on the platform — PDF, image, video, and audio tools, Arabic and English text and data (JSON/CSV) tools, calculators, and more — run entirely in your browser via JavaScript. Files or text you enter into these tools are never uploaded to a server; all processing stays on your own device. You can see the full, up-to-date list of tools, and which type each one is (local or relying on an external service), in our tools directory.

Data stored on your device

Uddatak doesn't set any cookies of its own. A few features do save small amounts of data in your own browser's storage so they keep working between visits. This data stays on your device — it isn't sent to our servers, and we can't see it.

localStorage: the list of tools you recently opened (up to 8, with the time of each visit) and the tools you marked as favorites, so they can be shown on the homepage and in the menu; and the AI tools' daily fair-use counter (how many AI generations you've used today, out of 20, and when that count resets). None of this includes anything you typed into or got out of a tool.

IndexedDB: the CV Builder automatically saves your current draft — its content, design settings and photo, if you added one — so you can pick up where you left off; it's deleted when you start a new CV or clear the current one. The OCR (text recognition) tools also keep a copy of the language data files they download from our own site, so they don't need to download them again; these files contain none of your images or text.

sessionStorage: when you choose to create a cover letter from the CV Builder, your job title, experience and skills are handed to the Cover Letter Generator this way. That page reads them once and deletes them immediately, and session storage is cleared when you close the tab anyway; nothing is sent to a server until you start the generation yourself.

You can delete all of this at any time by clearing this site's data in your browser settings; in a private window it's removed when you close the window. Tools that need your location (prayer times, Qibla direction), camera, microphone or screen only get access after you allow it in your browser's permission prompt, and use it only inside your browser.

AI tools

Tools such as rewriting, summarizing, translation, grammar checking, email and cover letter writing, and the AI features inside the CV Builder (improving your summary, suggesting skills, matching a job) are live now — and unlike the local tools above, these tools send the specific text you ask them to process (not the whole file, and nothing else beyond what that task needs) to Google Gemini via the Netlify AI Gateway for processing, which then returns the result. Our own backend never logs or stores your request text anywhere — only the operation name and how long it took, for general technical monitoring, with no content attached. That text is subject to Google's own privacy policy for how it handles AI processing requests. Every AI tool page shows a clear notice about this before anything is sent. In the CV Builder specifically: your core resume data, your photo, and the PDF export stay entirely local as described on that tool's own page — only the text you click an AI button to improve is ever sent.

Hosting, security and IP addresses

The site is hosted on Netlify. As with any website, delivering pages to you means our hosting provider necessarily receives technical connection data from your browser — such as your IP address, the page requested and your browser's user agent — which Netlify processes to serve the site and protect it, under Netlify's privacy policy.

To protect the AI tools from abuse and runaway costs, requests to our AI service pass through an automatic rate limit on Netlify's edge network: at most 6 requests per 60 seconds, counted per IP address and site domain. Requests over the limit are rejected by Netlify before they ever reach our application. This counting is done by Netlify's platform itself — our own code doesn't read, log or store your IP address, and we don't keep any database of visitors.

Third-party services your browser contacts

The site's fonts, and the engines and data files the tools rely on (for PDF, video, OCR, background removal and more), are served from our own site rather than third-party CDNs. Your browser connects directly to a third party in only two cases. The first is the Currency Converter: when you open it, your browser requests current exchange rates directly from ExchangeRate-API's open service at open.er-api.com. Because the request comes from your browser, that provider sees your IP address and standard request data, as any website you visit would; the amounts and currencies you pick are never sent — the conversion is calculated on your device — and the provider's own terms and privacy policy apply to that request.

The second is Google: Google Analytics and Google AdSense are loaded from Google's servers (such as googletagmanager.com, google-analytics.com, googlesyndication.com and doubleclick.net), so Google receives your IP address and browser data when they load. Both are described below.

Accounts and databases

The site doesn't require creating an account or signing in to use any available tool, and we don't currently run any database that stores user information. We don't collect any unnecessary personal data.

Analytics (Google Analytics)

We use Google Analytics 4 to measure overall site usage in aggregate (like visit counts and most-visited pages) to understand and improve how the tools are used, and to rank the site's most-used tools. What we send is the address and title of the page you're viewing (when you search for a tool, that address includes your search term), plus anonymous usage events, such as which tool was started, completed or failed, whether its result was downloaded or copied, the tool's category and the page language. We never send through this service any content you write or upload inside the tools — no text, no filenames, no resume content, no emails. Google Analytics may set its own cookies to tell visits apart, and data sent to it is subject to Google's own privacy policy; we don't control how Google processes it. In the EEA, the UK and Switzerland it only uses analytics cookies after you consent (see below), and anywhere you can opt out of this measurement yourself using tracking-blocking tools or browser extensions designed for that.

Contact form

The contact page form opens your own email app with a pre-filled message for you to send from your own account; we don't have a server that receives this form or stores what you write in it.

Cookies, advertising and your consent choices

Uddatak uses Google AdSense, Google's advertising service, to fund its free tools with ads: the AdSense script loads on the site's pages, and ads served by Google may appear on some of them. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet. Google Analytics may also set cookies for the measurement described above. Learn more about how Google uses information from sites that use its services.

If you visit from the European Economic Area, the United Kingdom or Switzerland, you'll see Google's consent message, shown through Google AdSense, asking for your choices. Until you consent, we use Google Consent Mode with analytics storage, ad storage, ad user data and ad personalization all set to “denied”, which tells Google's tags not to use cookies for analytics or advertising and not to use your data for personalized ads. You can review or change your choices at any time with the privacy settings link in the site footer. Outside these regions, these Google features are enabled by default.

Wherever you are, you can control ad personalization in your Google account's ad settings, and block or delete cookies at any time in your browser settings.

Your rights and choices

Because the tools run in your browser and we have no accounts or user database, we generally hold no personal data about you that we could look up, correct or delete — the data described above lives on your own device, and you can remove it at any time by clearing this site's data.

Depending on where you live (for example under the EU or UK GDPR), you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, to withdraw your consent at any time without affecting processing that took place before, and to lodge a complaint with your local data protection authority. For data processed by Google or Netlify, you can also use the tools and request channels they provide under their own policies — for example, Google's browser add-on to opt out of Google Analytics. For any privacy request or question, you can reach us as described below.

Contact us

For any privacy-related question, you can reach us via our Contact page.