Privacy policy.

The operator and data controller of tools.upnext.cz (operated under the Upnext brand) is:

The site is a public sandbox of small browser-side tools, engineering notes, and prototypes.

• IP address — used solely for rate-limiting (capping how many requests hit our server so nobody can overload our proxy services for ARES, VIES, ČNB, etc.). We keep the IP in memory for at most 5 minutes and store it nowhere.
• Cloudflare Turnstile cookie — when Turnstile is enabled (bot protection), Cloudflare sets a short-lived cookie. It is managed by Cloudflare, not us. Cloudflare privacy policy.

What we do not process: no accounts, no logins, no marketing tracking, no third-party cookies (Google Analytics, Facebook Pixel, ad networks). Files you load into the tools (videos, images, XML feeds) are processed in your browser — the server never sees them.

More about cookies in our cookie policy.

Our legal basis is legitimate interest under Art. 6(1)(f) GDPR — the interest in preventing abuse of publicly accessible tools. Without rate-limiting, a single person could send thousands of requests per second to ARES or ČNB through our proxies and harm both their service and ours.

IP addresses live in our server’s memory only for a sliding 5-minute window (rate-limiter), then are deleted automatically. Server logs, which may temporarily contain IPs, are kept for up to 30 days.

Some tools forward your input to public services to avoid the browser’s CORS restrictions:

• A company ID (IČO) is sent to ARES (Czech Ministry of Finance).
• A VAT ID is sent to VIES (European Commission).
• A date is sent to the ČNB API (Czech National Bank).
• A feed/page URL is sent only to our server, which fetches it and returns the results (Heureka feed validator, SEO validator). It goes no further.

Because we hold no identifiable data for longer than 5 minutes and have no user accounts, most GDPR rights (access, rectification, erasure, portability) cannot technically be exercised — we simply have no data about you. If you still have a question or want to object, reach us at [email protected]. You may also lodge a complaint with the Czech Data Protection Authority (ÚOOÚ).

We may update this policy from time to time. The current version is always on this page.