STSApps

Privacy Policy

What data we collect, how we use it, and the choices you control.

Effective date: January 5, 2026

Last updated: April 20, 2026

Savvy Tech Sphere, LLC ("we," "our," "us") operates the stsapps.biz website and related tools. This policy explains what data we collect, how we use it, and the choices you have. Account registration is optional; you can use most features without creating an account. We do not sell personal information.

Information We Collect

  • Usage analytics: page views, referrers, device type, approximate region, session duration, and tool usage events.
  • Consent choices: whether you granted or denied analytics, functional, or marketing cookies via the consent banner or cookie preferences page.
  • Cookies & identifiers: Google Analytics and Google AdSense cookies (when consent is granted) plus local storage and cookie values used to remember your preferences.
  • Diagnostic logs: server and infrastructure logs used for security, performance, and troubleshooting.
  • Contact form data: your name, email address, and message when you choose to contact us.
  • Account data: if you choose to register, we collect your email address and a securely hashed version of your password. We do not store plaintext passwords.
  • Tool uploads: when you use tools that process files (such as the Image Text Overlay tool), the files you upload are temporarily stored on our servers for processing. We do not access, review, or share the content of your uploads except as necessary to provide the requested processing.

Google Analytics 4 Configuration

stsapps.biz uses Google Analytics 4 (GA4) as its web measurement service. We configure the GA4 property with the following settings so that telemetry remains narrow and privacy-respecting:

  • IP anonymization: ON. IP addresses are truncated by Google before any storage or further processing.
  • Google Signals: OFF. We do not enable cross-device or cross-site ad personalization signals in GA4.
  • Data retention: 14 months. User and event data in GA4 is set to expire at 14 months; aggregated reporting is retained per Google's standard defaults.
  • Consent Mode v2: analytics and advertising storage default to denied and are only upgraded to granted after you grant the corresponding category in our cookie notice or Cookie Preferences page.

How We Use Information

  • Operate, maintain, and improve stsapps.biz and our tools.
  • Measure engagement and usage trends through Google Analytics 4.
  • Deliver cookie preferences, personalization features, and (when enabled) advertising measurement.
  • Respond to inquiries submitted through the contact form.
  • Manage your account and provide extended data retention benefits for registered users.
  • Detect abuse, secure our systems, and enforce our Terms.
  • Comply with legal obligations and respond to lawful requests.

Legal Bases (EEA/UK/CH)

  • Consent: analytics and marketing cookies are processed only after you grant permission.
  • Legitimate interests: core site operation, security monitoring, and non-cookie analytics that do not rely on consent.
  • Contract: delivering the site and tool functions you request.

Advertising

stsapps.biz uses Google AdSense to display advertisements on our tool pages. When AdSense is active, Google's adsbygoogle.js script loads on all pages that use our standard layout. This script may read cookies, use browser fingerprinting, and collect behavioral data to serve interest-based ads on our behalf. Google operates this service as an independent data controller under its own privacy policy.

Data Google may collect via AdSense: device and browser identifiers, IP address, browsing activity across Google partner sites, and ad interaction signals (views, clicks).

Opt-out options: You can opt out of personalized advertising by visiting Google's Ad Settings, the Digital Advertising Alliance opt-out, or by using a browser with ad blocking controls. Declining marketing cookies via our Cookie Preferences page will prevent AdSense from loading.

EU/EEA/UK visitors: Personalized ads require your explicit consent. We use Google Consent Mode v2 so that AdSense respects your consent choices. See the Interim Consent Posture (EEA/UK) section below for how stsapps.biz currently handles traffic from these regions.

Interim Consent Posture (EEA/UK)

stsapps.biz has not yet deployed a Google-certified Consent Management Platform (CMP). Until a CMP is in place, we apply a Non-Personalized Ads (NPA) posture for visitors from the European Economic Area, the United Kingdom, and Switzerland:

  • Google AdSense is configured to serve non-personalized ads to these regions by default, and our cookie notice defaults advertising and analytics storage to denied under Consent Mode v2.
  • Personalized ads and analytics are only activated after the visitor grants the corresponding category in our cookie notice or Cookie Preferences page.
  • We will select and deploy a Google-certified CMP no later than September 30, 2026. After that date this interim posture will be replaced with full CMP-managed consent flows, and we will update this policy accordingly.

How We Share Information

  • Google LLC: provides Google Analytics, Consent Mode, and Google AdSense advertising services.
  • Cloudflare, Inc.: provides bot protection services (Turnstile) on our contact form to prevent spam and abuse. When you submit the contact form, Cloudflare receives your IP address and a verification token to distinguish legitimate users from automated bots.
  • Infrastructure providers: hosting, security, and email delivery services that support the site and contact form.
  • Professional advisers or legal authorities: when required by law, to enforce our agreements, or to respond to legal process.
  • We do not sell personal information.

Cookies & Consent

By default, analytics and marketing cookies are set to "denied." You can change your preferences any time on the Cookie Preferences page. Browser-level controls may also block cookies; core site functionality continues, but analytics and personalization features may be limited.

Contact Form

When you submit our contact form, we collect your name, email address, and message. This information is sent to our team via email and is used solely to respond to your inquiry. We do not store contact form submissions in a database or use them for marketing purposes. Your information is retained only as long as necessary to address your request.

To prevent spam and abuse, our contact form uses Cloudflare Turnstile for bot protection. When the form is displayed, Cloudflare may collect your IP address and browser information to verify you are a legitimate user. For more information, see Cloudflare's Privacy Policy.

Account Registration

You may optionally create an account to access extended features such as longer data retention periods for tool outputs. When you register, we collect:

  • Email address: used as your account identifier and for account-related communications.
  • Password: stored only as a secure hash using bcrypt. We never store or have access to your plaintext password.

When you log in, we set an authentication cookie (sts_auth) to maintain your session. This cookie is HTTP-only, uses the Secure flag, and expires after 7 days. We do not use this cookie for tracking or advertising purposes.

Retention

  • Google Analytics data is retained according to our GA4 settings.
  • Consent choices remain stored locally until you clear them or reset your browser.
  • Server logs are kept for a limited period and may be retained longer when needed for security or legal reasons.
  • Contact form messages are retained in our email system only as long as needed to address your request.
  • Account data (email and password hash) is retained until you delete your account or request deletion. To request account deletion, contact us through the contact form.
  • Tool uploads: files uploaded to processing tools (such as Image Text Overlay) are automatically deleted after 4 hours for guests or 48 hours for authenticated users. Download links expire after 1 hour.
  • Retention periods for external service providers are controlled by those providers unless we can configure them. Please validate those retention periods directly with the relevant provider.

International Transfers

Data may be processed in the United States or other regions where our service providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers when required.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, as well as to withdraw consent. To exercise these rights, contact us through the contact form. We may request verification before fulfilling a request.

Children

The site is not directed to children under 13 (or the minimum age in your jurisdiction). If you believe a child provided personal information, contact us so we can delete it.

Security

We use HTTPS, access controls, and monitoring to protect data. No security measure is perfect; please notify us promptly if you suspect an issue.

Changes to This Policy

We may update this Privacy Policy as our services evolve or laws change. We will post a new effective date and may provide additional notice of material changes.

Contact Us

Use the contact form.