Privacy Policy

This Privacy Policy explains how Biohack Tools ("we", "us", "our"), accessible at biohack-tools.com, handles information when you use our website. We are committed to protecting your privacy and being clear about what we do and don't collect. This policy complies with the General Data Protection Regulation (GDPR).

1. Who We Are

Biohack Tools is a free online platform providing health and biohacking calculators and tools. We are based in the Netherlands and operate under EU law, including the GDPR.

For any privacy-related questions, you can reach us via our Contact page.

2. What Data We Collect

We do not collect or store the health information you enter into our Tools. Everything you type into our calculators — such as your weight, height, or age — is processed entirely in your browser and is never sent to, or stored on, our servers.

We do, however, process the following limited data when you visit the site:

• Server logs — standard web server logs that may include your IP address, browser type, operating system, referring URL, and pages visited. These are used only for security, abuse prevention, and keeping the site running, and are deleted automatically after 30 days.
• Analytics data — we use analytics to understand how visitors use the site (such as page views, session duration, and device type) so we can improve it. This data is aggregated and used to understand trends, not to identify you personally.
• Advertising data — we display ads through Google AdSense, which may collect data via cookies and similar technologies to show ads and measure their performance. See sections 5 and 8 for details.

3. How We Use Data

Any data we process is used strictly for the following purposes:

• Operating, maintaining, and securing the website
• Monitoring for security threats and abuse
• Understanding how the site is used so we can improve our Tools
• Displaying advertising that helps keep our Tools free
• Complying with our legal obligations

We never sell or rent your personal data, and we do not share it with third parties except the service providers described in this policy (such as our host, analytics, and advertising partners) who process it on our behalf or under their own privacy terms.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we rely on the following legal bases for processing data:

• Legitimate interests (Article 6(1)(f)) — for server logs used to keep the website secure and running properly.
• Consent (Article 6(1)(a)) — for analytics and advertising cookies. Where required, we ask for your consent through a cookie banner before these cookies are placed, and you can withdraw it at any time.

5. Cookies

Biohack Tools may use a few types of cookies. Strictly necessary cookies are required for the site to function and are always active. Analytics and advertising cookies are used to measure usage and to display ads through Google AdSense.

Where required by law, we ask for your consent through a cookie banner before placing analytics or advertising cookies, and you can change or withdraw your choice at any time. Google may use cookies to personalise the ads you see; you can review and control ad personalisation at google.com/settings/ads.

6. Health Data

Health-related data (such as weight, height, age, or body measurements) that you enter into our Tools is classified as sensitive data under the GDPR. We want to be explicitly clear: this data is never transmitted to our servers. It exists only in your browser's memory for the duration of your session and is discarded when you leave or refresh the page. Because it never reaches us, it is never shared with any analytics or advertising partner.

7. Data Retention

Because we do not store the data you enter into our Tools, there is no retention period for it. Server logs containing IP addresses are deleted automatically after 30 days. Data processed by our analytics and advertising partners is retained according to their own policies, linked in section 8.

8. Third-Party Services

We use the following third-party services, which may process limited technical data such as your IP address or cookie identifiers:

• Hosting provider — our website is hosted on a third-party server that may process anonymised server log data as described in section 2.
• Analytics — we use analytics tools to understand site usage in aggregate. These may set cookies subject to your consent.
• Google AdSense — we use Google AdSense to display ads. Google and its partners may use cookies and similar technologies to serve and measure ads. You can learn more in Google's privacy & terms.

9. Your Rights Under GDPR

As an EU resident, you have the following rights regarding your personal data:

• Right of access — you can request a copy of any personal data we hold about you
• Right to rectification — you can request correction of inaccurate data
• Right to erasure — you can request deletion of your personal data ("right to be forgotten")
• Right to restriction — you can request that we limit how we use your data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

Because we do not store personal data from tool usage, some of these rights may not apply in practice for standard visitors. However, if you believe we hold any data about you, please contact us and we will respond within 30 days as required by GDPR.

10. Data Security

We take reasonable technical and organisational measures to protect our website and any data we process against unauthorised access, loss, or misuse. These include HTTPS encryption, access controls, and regular security reviews.

11. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of the website after changes are posted constitutes your acceptance of the updated policy.

13. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

• Website: autoriteitpersoonsgegevens.nl
• Phone: +31 (0)70 888 85 00

We would however appreciate the chance to address your concerns before you contact the authority — please reach out to us first via our Contact page.

14. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us through our Contact page. We aim to respond to all privacy requests within 30 days.