Data Processing

Data Subject Access Requests (DSAR)

Under GDPR Article 15, you have the right to obtain a copy of personal data we hold about you. GridCutter retains the following types of data that may be linked to your identity:

• Server log files — IP address, browser type, date/time of access, pages visited. Retained for 90 days.
• Google Analytics data — Anonymised and aggregated. Generally cannot be linked to you directly.
• No image or account data — We hold no photos, usernames, passwords, or emails.

To request a copy of your data, email gridcuttertool@gmail.com with the subject line "GDPR Data Access Request" and include your IP address (if known). We will respond within 30 days.

Right to Erasure

Under GDPR Article 17, you can request deletion of personal data we hold about you. Once deleted, we cannot recover or restore your server logs.

To request erasure: Email gridcuttertool@gmail.com with the subject "GDPR Erasure Request" and include your IP address. We will delete your server logs within 30 days.

Note: Most data we hold is already anonymised (Google Analytics). Anonymised data cannot be linked back to you and does not require deletion under GDPR.

Data Processing Agreements (DPA)

GridCutter uses third-party services that may process data on our behalf:

Data Retention Schedule

• Server logs: 90 days, then automatically deleted
• Google Analytics: 14 months (configurable in Google Analytics settings)
• Google AdSense cookies: Per Google's cookie policy (typically 24 months)
• Image data: Never stored (processed client-side only)

Lawful Basis for Processing

We process personal data under the following lawful bases (GDPR Article 6):

• Legitimate Interest (Article 6(1)(f)) — For server logs to prevent abuse, detect errors, and maintain security. We balance this against user privacy rights.
• Explicit Consent (Article 7) — For Google Analytics and AdSense cookies. You can withdraw consent at any time by disabling these in your browser or opting out at Google Ads Settings.

Right to Lodge a Complaint

If you believe GridCutter has violated your privacy rights under GDPR, you have the right to lodge a complaint with your local data protection authority (DPA). Examples include:

• EU: European Data Protection Board (list of DPAs by country)
• UK: Information Commissioner's Office (ICO)
• You can also contact us first: Email gridcuttertool@gmail.com to try to resolve the issue directly.

Contact Us

For any questions about data processing, GDPR, or to exercise your rights: