What we collect, and what we don't.
Last updated: 31 August 2026
This policy explains what happens to your data when you use the tools on tools.codeofthegeeks.com. It is short because these tools collect very little.
Code of the Geeks B.V. Mgr. Buckxstraat 8, 6134AP Sittard, The Netherlands KvK: 72983469 Email: info@codeofthegeeks.com
Code of the Geeks B.V. is the data controller for this website.
Most tools on this site run entirely in your browser using WebAssembly. Your file is read into your browser's memory, processed there, and offered back to you as a download. It is never uploaded. We do not receive it, do not store it, and have no technical means of accessing it. You can verify this yourself: open a tool, disconnect from the internet, and it still works.
The AI Stem Separator and Photo Restoration are the exceptions. They rely on GPU models far too large to run in a browser, so your file (a track, or a photo) is uploaded to and processed on our server. Text to Speech works the same way, except the input is the text you type rather than a file. In every case:
The legal basis for this processing is our legitimate interest in providing the service you explicitly requested (Article 6(1)(f) GDPR). Your data is processed on our server infrastructure within the EU, held only for as long as described above, and used for no other purpose.
The server-side tools (AI Stem Separator, Text to Speech and Photo Restoration) set one strictly-necessary session cookie (cotg_sid) to link your job to your browser, so only you can retrieve your result. The cookie holds no personal data, never reaches our logs (the log configuration strips it before writing), and is deleted when you close your browser. Strictly-necessary session cookies are exempt from the consent requirement under Article 5(3) of the ePrivacy Directive.
The tool pages (Format Converter, Loudness Normalizer, Stem Separator, Tag Editor, Vocal Remover, Vocal Extractor, Photo Restoration) display advertising served by Google AdSense. When you visit a tool page, a script is loaded from Google's servers. If you consent via the banner that appears on your first visit, Google may set advertising cookies on your device to show you personalised ads. If you decline, no advertising cookies are placed. See the Advertising section below for full details.
The hub, overview and company pages on this site (the root, the audio overview, and the privacy, terms and licenses pages) load no third-party resources and set no cookies. No other company sees that you visited those pages.
There are no accounts on this site, and no local storage or similar technique is used to recognise you between visits.
The tool pages on this site carry display advertisements served by Google AdSense, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Google may use cookies and similar technologies to show you personalised ads based on your browsing activity across the web. Before any advertising cookies are placed, Google's consent banner asks for your permission. If you decline, only non-personalised ads may be shown and no advertising cookies are set.
You can change or withdraw your advertising consent at any time by revisiting the consent banner. Google's own privacy policy is available at policies.google.com/privacy. You can opt out of personalised advertising across all Google services at adssettings.google.com.
The legal basis for personalised advertising is your consent (Article 6(1)(a) GDPR and Article 5(3) ePrivacy Directive). Any non-personalised ads shown when you decline are based on our legitimate interest in funding the site (Article 6(1)(f) GDPR).
Our web server keeps a log of the requests it receives, so we can see which tools people find useful and notice when something on the site is broken.
Each log entry records the page requested, the date and time, whether the request succeeded, how much data was sent, and the browser's own description of itself. It does not record your IP address. That field is discarded before the entry is written to disk, so it never reaches our storage at all.
We use these logs only in aggregate: counts of page views, which pages are popular, which links brought people here, and which requests produced errors. We have no way to connect a request to a person, and we do not try to.
The statistics are produced by software running on our own servers. The log files are copied over a private network to a second server of ours, which compiles the statistics and sends the finished page back; both servers are rented from the same hosting provider and are located in the EU. No third party receives the logs or the statistics.
How long we keep it. Log files are deleted automatically after 30 days. On the web server itself they are deleted much sooner (usually within a couple of days) because they are copied to the second server shortly after they are written, and it is that copy which is kept for the full 30 days and then deleted automatically. The aggregate counts derived from them (for example, "this page was viewed 1,400 times in July") are kept longer, because such totals are not personal data and cannot be traced back to anyone.
Our server also keeps technical error logs to diagnose faults. These record what went wrong, not who was visiting.
Why we are allowed to do this. Keeping a website working and understanding how it is used is a legitimate interest of ours under Article 6(1)(f) GDPR. We have kept the impact on you as low as we know how to: no identifier is stored on your device, and your IP address is never written down.
We hold almost nothing about you. Because no IP address or other identifier is recorded, we cannot search our logs for "your" data. There is nothing in them that points to you, which also means there is normally nothing for us to give you, correct, or delete.
You have the right to access, correct, delete, or restrict the use of personal data we hold about you, to object to processing based on legitimate interest, and to receive a copy of your data. If you believe we hold something about you, email info@codeofthegeeks.com and we will respond within one month.
You have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), if you think we have handled your data improperly.
The site runs on a virtual server rented from STRATO AG (Berlin, Germany), which acts as a processor on our behalf. Servers and data stay within the EU.
If we make changes to how we collect or process data, we will update this policy and change the 'Last updated' date above. Where the law requires consent for new processing, we will ask for it before that processing begins.