Bakefile

Privacy

In short: the free tools process your files in your browser and transmit nothing. The paid services, which you trigger yourself, send your files to our server in Europe and delete them automatically. The site uses no cookie, no tracker and no account.

Free tools: your files stay with you

Every free tool runs locally in your browser (a Rust engine compiled to WebAssembly plus native browser APIs). No file, file content or file name is sent to our servers or to any third party.

Paid services: what we receive

  • Your files are sent encrypted (HTTPS) to our server, processed by the same engine, then deleted automatically: at most 60 minutes after upload if you do not pay, 24 hours after payment, or immediately when you click “Delete my files”. They are not backed up, not read by anyone, and not used for anything but your processing.
  • The order identifier is a random token in the address of the order page. It is your only way to your files: do not share it.
  • Payment happens on a page hosted by Stripe. Stripe collects your e-mail address, your payment details and, where applicable, your billing address under its own privacy policy. We never see your card number; we only receive the Stripe session identifier, the “paid” status and the amount, kept with the order until it is deleted.

Technical data

  • Technical logs: the static site server keeps no access log. The hosting provider’s reverse proxy and Cloudflare may record your IP address, the requested URL and technical details (browser) for security and reliability, on the basis of our legitimate interest; we keep them for at most 30 days. The paid-services server logs its errors without any file name or content.
  • Browser local storage: your theme preference (light/dark) and your processing history (files produced by the free tools, identifiers of your orders) are saved in your browser’s local storage, for the duration you choose on the History page (7 days by default, can be turned off). It is strictly functional, never transmitted, and can be cleared from that page or from your browser.
  • Statistics: no audience measurement is in place today. If aggregated counters (runs per tool per day, searches without results) are added, they will contain no IP address, identifier, file name or content, and this page will be updated.

Providers

  • Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (servers in the European Union).
  • Content delivery and protection: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare routes and protects the traffic and may process your IP address for that purpose; it is certified under the EU-US Data Privacy Framework.
  • Payments: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. For the paid services Stripe acts as the merchant of record (see the terms of use).

Your rights

Under the GDPR you have rights of access, rectification, erasure and objection regarding your data. You can delete the files of an order yourself at any time from its page. For any other request, write to [email protected]. You may lodge a complaint with your supervisory authority (CNIL in France).

Last updated: 4 November 2026.