STSApps

Privacy Policy

What data we collect, how we use it, and the choices you control.

Effective date: January 5, 2026

Last updated: January 21, 2026

Savvy Tech Sphere, LLC ("we," "our," "us") operates the stsapps.biz website and related tools. This policy explains what data we collect, how we use it, and the choices you have. Account registration is optional; you can use most features without creating an account. We do not sell personal information.

Information We Collect

  • Usage analytics: page views, referrers, device type, approximate region, session duration, and tool usage events.
  • Consent choices: whether you granted or denied analytics, functional, or marketing cookies via the consent banner or cookie preferences page.
  • Cookies & identifiers: Google Analytics cookies (when consent is granted) plus local storage and cookie values used to remember your preferences.
  • Diagnostic logs: server and infrastructure logs used for security, performance, and troubleshooting.
  • Contact form data: your name, email address, and message when you choose to contact us.
  • Account data: if you choose to register, we collect your email address and a securely hashed version of your password. We do not store plaintext passwords.
  • Tool uploads: when you use tools that process files (such as the Image Text Overlay tool), the files you upload are temporarily stored on our servers for processing. We do not access, review, or share the content of your uploads except as necessary to provide the requested processing.

How We Use Information

  • Operate, maintain, and improve stsapps.biz and our tools.
  • Measure engagement and usage trends through Google Analytics 4.
  • Deliver cookie preferences, personalization features, and (when enabled) advertising measurement.
  • Respond to inquiries submitted through the contact form.
  • Manage your account and provide extended data retention benefits for registered users.
  • Detect abuse, secure our systems, and enforce our Terms.
  • Comply with legal obligations and respond to lawful requests.

Legal Bases (EEA/UK/CH)

  • Consent: analytics and marketing cookies are processed only after you grant permission.
  • Legitimate interests: core site operation, security monitoring, and non-cookie analytics that do not rely on consent.
  • Contract: delivering the site and tool functions you request.

How We Share Information

  • Google LLC: provides Google Analytics and Consent Mode services.
  • Cloudflare, Inc.: provides bot protection services (Turnstile) on our contact form to prevent spam and abuse. When you submit the contact form, Cloudflare receives your IP address and a verification token to distinguish legitimate users from automated bots.
  • Infrastructure providers: hosting, security, and email delivery services that support the site and contact form.
  • Professional advisers or legal authorities: when required by law, to enforce our agreements, or to respond to legal process.
  • We do not sell personal information.

Cookies & Consent

By default, analytics and marketing cookies are set to "denied." You can change your preferences any time on the Cookie Preferences page. Browser-level controls may also block cookies; core site functionality continues, but analytics and personalization features may be limited.

Contact Form

When you submit our contact form, we collect your name, email address, and message. This information is sent to our team via email and is used solely to respond to your inquiry. We do not store contact form submissions in a database or use them for marketing purposes. Your information is retained only as long as necessary to address your request.

To prevent spam and abuse, our contact form uses Cloudflare Turnstile for bot protection. When the form is displayed, Cloudflare may collect your IP address and browser information to verify you are a legitimate user. For more information, see Cloudflare's Privacy Policy.

Account Registration

You may optionally create an account to access extended features such as longer data retention periods for tool outputs. When you register, we collect:

  • Email address: used as your account identifier and for account-related communications.
  • Password: stored only as a secure hash using bcrypt. We never store or have access to your plaintext password.

When you log in, we set an authentication cookie ("sts_auth") to maintain your session. This cookie is HTTP-only, uses the Secure flag, and expires after 7 days. We do not use this cookie for tracking or advertising purposes.

Retention

  • Google Analytics data is retained according to our GA4 settings.
  • Consent choices remain stored locally until you clear them or reset your browser.
  • Server logs are kept for a limited period and may be retained longer when needed for security or legal reasons.
  • Contact form messages are retained in our email system only as long as needed to address your request.
  • Account data (email and password hash) is retained until you delete your account or request deletion. To request account deletion, contact us at [email protected].
  • Tool uploads: files uploaded to processing tools (such as Image Text Overlay) are automatically deleted after 4 hours for guests or 48 hours for authenticated users. Download links expire after 1 hour.
  • Retention periods for external service providers are controlled by those providers unless we can configure them. Please validate those retention periods directly with the relevant provider.

International Transfers

Data may be processed in the United States or other regions where our service providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers when required.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, as well as to withdraw consent. To exercise these rights, contact us at [email protected]. We may request verification before fulfilling a request.

Children

The site is not directed to children under 13 (or the minimum age in your jurisdiction). If you believe a child provided personal information, contact us so we can delete it.

Security

We use HTTPS, access controls, and monitoring to protect data. No security measure is perfect; please notify us promptly if you suspect an issue.

Changes to This Policy

We may update this Privacy Policy as our services evolve or laws change. We will post a new effective date and may provide additional notice of material changes.

Contact Us

Use the contact form or email [email protected].