Privacy notice

Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation is Alexander Seidel, c/o POSTFLEX PFX-190-687, Emsdettener Straße 10, 48268 Greven, Deutschland. You can reach us by telephone at +49 8063 9720713 and by email at deepbase64@team-seidel.de.

What happens to what you paste

Nothing you enter into this tool or select as a file is transmitted to us or to anyone else. All conversion happens in your browser.

That is not a promise but a property of how the site is deployed: it consists entirely of static files. There is no program on our side that could receive an input. In addition, a Content Security Policy shipped inside every document restricts outbound connections to this origin. You can verify this yourself in your browser’s network tab.

Hosting and server logs

The site runs on a server we rent from STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Deutschland. The servers are located in Deutschland. A data processing agreement under Art. 28 GDPR is in place with the provider. The provider supplies the machine; we run the software on it ourselves. The access log, and everything in it, is therefore our responsibility rather than theirs.

When the page is requested, the server processes technically necessary data your browser transmits automatically: IP address, date and time of the request, the file requested, transfer status, volume transferred, the referring page, and browser and operating system identifiers.

Your IP address is shortened before the log line is written: for IPv4 the first 24 bits are kept, for IPv6 the first 48 bits. The complete address is never stored — not for an interim period and not in some other file. It is available to the server in memory while the page is delivered, and it is not written down.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the technical delivery of the site, defence against attacks, and establishing the reach of this service. The logfiles are kept for at most 7 days and deleted automatically thereafter.

We evaluate those logfiles to learn how often the site is visited and which language versions are wanted. That evaluation reads nothing but the lines described above. It sets no cookie, places nothing on your device, loads nothing into your browser, and passes nothing to any third party. The shortened addresses become totals; they are not combined with other sources, and recognising an individual visitor is therefore neither intended nor possible.

Storage in your browser

This site sets no cookies. It writes two entries to your browser’s local storage: deepbase64:history and deepbase64:appearance.

The first holds your last 10 conversions — time, direction, number of layers, size, and a preview truncated to 64 characters. Older entries are dropped. Full payloads are never stored, and everything under that key together is capped at 4096 bytes. The second holds nothing but your choice between light and dark appearance.

Neither value leaves your device and neither is accessible to us. You can clear the history at any time using the control in the tool; your browser settings remove both entries as well.

This storage is strictly necessary for functions you explicitly requested and therefore requires no consent under § 25(2)(2) TDDDG. For the same reason there is no cookie banner here: there would be nothing to consent to.

No third parties, no transfers

No analytics or tracking service is used, no advertising is served, and no external resource is loaded. The fonts are served from our own origin, so loading the page establishes no connection to any third party. Your browser talks to this site and to nobody else.

That is a different statement from saying nothing is measured. We do count visits — but we do it by reading our own server log, after the page has been delivered, without anything running in your browser to make it possible. No third party learns of your visit, and even we learn only that it happened.

No personal data is transferred to a third country.

Your rights

You have the right to access the data held about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You may object to processing based on legitimate interests under Art. 21 GDPR.

An informal message to the address above is enough to exercise these rights. Please note that we can only answer a request insofar as we hold any data at all — which here is limited to the server logs described above.

Right to complain

Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority — that of your habitual residence, your place of work, or the place of the alleged infringement.

Changes

If the technology behind this site changes, this notice changes with it. The version published here is the one that applies. Last updated: 2026-08-16.