Your tool inputs stay in your tab.

Ransomware first aid and local exports

The first-aid tool uses broad choices and fixed rules in your current tab. It does not inspect devices, accept evidence files, send inputs to AI services or create saved cases. Choices, reviewed-step marks and optional generic reminders are held in memory, not placed in URLs or application storage. Clear immediately discards this working state; updating a brief asks before replacing recorded work. Reloading or leaving the tool discards its state; browser-managed data and extensions remain outside our control.

Downloading a text brief or printing creates a separate copy containing the context, guidance, reviewed marks and any reminder you entered. Those copies can contain your information and are not deleted by Clear. Protect them and use approved sharing channels. External resources open only when selected; no case information is appended, but the destination receives an ordinary browser connection under its own privacy terms.

Photo metadata removal

The photo metadata remover inspects and edits supported JPEG files in a temporary browser worker. Photos, filenames and metadata are not uploaded, logged by the tool, stored in application storage or placed in URLs. GPS fields are not sent to map services. The original stays unchanged; an explicitly downloaded copy uses a neutral filename and remains under your control. Display information such as orientation and, with your confirmation, an ICC color profile can remain in the copy. Clear, reload and navigation discard the app’s working state, not downloaded files or browser-managed data. Optional audience analytics never receives the photo, filename, metadata, or download.

QR images and decoded content

The QR code scanner processes your image in a temporary browser worker. It does not upload the image or filename, send decoded content to a server, or save a scan history. It does not fetch link previews, follow redirects, or open decoded links. Clear stops processing and discards the application’s working state; reloading or leaving the page also clears it. Your original files, OS clipboard, and copies you make remain under your control. Browser-managed session features and extensions are outside the tool’s control.

Controller and contact

Paragamix GmbH, Alte Dorfstraße 37, 39326 Angern, Germany, is responsible for this website. For privacy questions or requests, write to info@paragamix.com. See our legal notice for company details.

Choices, progress, and local notes

Configuration choices, action statuses, timestamps, and notes are processed in the memory of your current browser tab. They are not uploaded, placed in URLs, or saved by the application in cookies, local storage, a database, or an account.

Changing settings leaves your existing checklist intact until you rebuild it. Rebuilding or restarting asks for confirmation if you have recorded work. Reloading or closing the tab clears the application’s working state. Your browser may independently cache website files or retain history; the tool does not control browser extensions, device backups, or browser session features.

Printing or saving a PDF creates a copy under your control. Restarting the tool does not remove that copy. Keep it according to your organization’s policies. Do not enter confidential incident information in this public tool.

Website delivery and hosting in the United States

The website is hosted with Hetzner on a server in Ashburn, Virginia, USA. To serve pages securely, the server necessarily processes your IP address and technical request data such as the requested page, request time, and browser-provided headers. Your internet and hosting providers also process connection data.

We use this information to deliver the website and maintain its availability and security, based on our legitimate interests under Article 6(1)(f) GDPR. Supplying the connection data is technically necessary to load the site; it is not a requirement to enter an agreement with us.

Routine HTTP access logging is disabled in our web server configuration. Operational and security diagnostics may still contain connection information when errors or attacks occur. Such records are used for troubleshooting and protection, not visitor profiling, and retained only while needed for those purposes or applicable obligations.

US hosting means technical connection data is processed outside the European Economic Area. Hetzner publishes its data protection and international-transfer documentation, including its data-processing agreement and standard contractual clauses for third-country locations. Contact us for information about the safeguards applicable to our hosting arrangement. We do not claim that browser-local answers make all website traffic anonymous or eliminate international data transfers.

Email you choose to send

When you email us, we receive your address, message, and related delivery information. We use them to respond to your request, based on Article 6(1)(f) GDPR, or Article 6(1)(b) when the request concerns a contract. Our email provider processes messages to deliver this service. We retain correspondence while needed to handle the request and meet applicable retention obligations. Please do not email live incident evidence or sensitive personal information.

Cookies, analytics, advertising, and external links

Google Analytics 4 is optional and remains completely blocked until you select “Allow analytics.” If you consent, Google receives the page path without query parameters or fragments, page title, approximate technical and device information, page views, scroll depth, and clicks on links to other domains. Form interactions, on-site search, video events, and file-download events are disabled. Tool answers, notes, uploaded images, filenames, decoded QR content, generated work products, and downloaded content are never sent to Analytics. Advertising storage, ad user data, ad personalization, and Google Signals remain disabled.

With consent, Google Analytics may set identifiers such as _ga in your browser for up to 90 days. The legal basis is your consent under Article 6(1)(a) GDPR and the applicable rules for storing or accessing information on your device. Google Ireland Limited is the service provider; Google LLC and other Google companies may process data in the United States and other countries under Google’s published transfer safeguards. GA4 uses IP addresses to derive coarse location information and discards them before logging them, according to Google. We use the data for aggregated audience and content analysis, not to identify visitors. User-linked and event data retention in this property is limited to two months without resetting the period when a user returns; aggregated standard reports may remain available for longer.

Your choice is saved locally so that the banner does not reappear on every page. You can change or withdraw it at any time using “Privacy settings” in the footer. Rejecting Analytics prevents the Google tag from loading; withdrawing consent stops further Analytics collection and removes accessible first-party Analytics cookies. Withdrawal does not affect processing that occurred before it. External and email links remain optional and are governed by the destination’s own privacy practices. No advertising scripts currently run.

Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction, or portability of personal data we hold about you. You may object to processing based on legitimate interests for reasons relating to your situation. We cannot retrieve checklist answers that were never sent to us.

You may also complain to a data protection authority, including the data protection authority of Saxony-Anhalt. Contact info@paragamix.com to exercise your rights.