Privacy Policy

Last updated: 2026-10-12

Draft. This text has not yet been reviewed by a lawyer and may change before launch.

The short version

• Your files never leave your device. Every tool runs in your browser. We cannot see, store or recover your files.
• Like any website, our hosting provider sees your IP address and browser details when you load a page.
• The site is free because it shows ads. Ad cookies are only used with your consent where the law requires it.
• If you buy Pro, we keep what we need to run your subscription. Card details stay with the payment provider.
• We do not sell your personal data.

1. Who we are

Nibbo is operated by [Company legal name] LLC, [Registered address], Tashkent, Republic of Uzbekistan, registration [Registration number / TIN] ("we", "us"). We are the controller of the personal data described here. Contact: privacy@nibbo.org.

EU representative (Art. 27 GDPR): [name and address]. UK representative (Art. 27 UK GDPR): [name and address].

2. Your files

Videos, images, audio and documents you open in Nibbo are read and processed by your own browser on your own device, using WebCodecs, WebAssembly and similar browser technology. They are not uploaded to us or anyone else, and we have no copy of them or of the results. Some tools download processing code (for example FFmpeg) from our servers; that code runs locally and does not send your files back.

3. What we process and why

3.1 Visiting the site

Our site is served by Cloudflare, Inc. When your browser requests a page, Cloudflare processes your IP address, browser and device details (user agent), the page requested and the time, to deliver the site and protect it from abuse. Cloudflare also tells us which country your IP address belongs to. We use that country only in your browser, to show a flag next to our mascot and to decide whether to ask for cookie consent; we do not store it. You can change or hide the flag at any time.

Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

3.2 Fonts

Some fonts are loaded from Google Fonts (Google LLC), which receives your IP address and browser details when the font files are requested. Legal basis: legitimate interest in consistent presentation (Art. 6(1)(f) GDPR).

3.3 Advertising

The free version of Nibbo shows ads served by Google (Google Ireland Limited for users in the EEA, UK and Switzerland; Google LLC elsewhere). Google and its partners may use cookies or similar identifiers to show ads, limit how often you see them, measure them, prevent fraud and, if you allow it, personalise them based on your visits to this and other sites.

• In the EEA, the UK and Switzerland, ad cookies are only used after you agree in our cookie banner. Without consent you may still see non-personalised or limited ads that do not use cookies for advertising. Legal basis: consent (Art. 6(1)(a) GDPR).
• Elsewhere, ads may use cookies by default. You can opt out of personalised ads at any time under Cookie settings. We honour the Global Privacy Control signal as an opt-out of personalised ads.

How Google uses data from sites that use its services: policies.google.com/technologies/partner-sites. You can manage personalised ads from Google at myadcenter.google.com and opt out of many third-party vendors at aboutads.info or youronlinechoices.eu.

3.4 Nibbo Pro

Pro costs $2 per month. When you subscribe we process your email address, your subscription status and history, the country of your payment, and the transaction references we receive from the payment provider. Payments are handled by licensed payment providers in Uzbekistan (such as Payme, Click or Octo). They receive your card details directly; we never see or store full card numbers. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) and legal obligations for accounting and tax (Art. 6(1)(c) GDPR).

3.5 Contacting us

If you write to us we use your message and email address to answer you. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or contract, if it concerns your subscription.

4. Storage on your device

We store a few small settings in your browser (your flag choice and your cookie choice). Details are in our Cookie Policy.

5. Who receives data

• Cloudflare, Inc. (hosting, security, country lookup) as our processor.
• Google (fonts, advertising) as described above.
• Payment providers (Pro subscriptions only).
• Authorities, where we are legally required to disclose data.

6. International transfers

We are based in Uzbekistan, and our providers operate in the United States, the EU and elsewhere. Where personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism. Personal data of citizens of Uzbekistan is processed in line with the Law of the Republic of Uzbekistan "On Personal Data", including its localisation requirements.

7. How long we keep data

• Your files: never stored by us.
• Hosting and security logs: as kept by Cloudflare, typically a few days to a few weeks.
• Pro account data: while your subscription is active and up to [N] years afterwards for accounting and tax records.
• Support emails: up to [N] years after the conversation ends.
• Settings in your browser: until you clear them; your cookie choice is asked again after 12 months.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent at any time (this does not affect processing before withdrawal). To withdraw cookie consent use Cookie settings. For anything else write to privacy@nibbo.org. You may also complain to your local data protection authority.

California and other US states: we do not sell personal information for money. Allowing personalised ads may count as "sharing" for cross-context behavioural advertising; you can opt out under Cookie settings or with Global Privacy Control. We will not discriminate against you for using your rights.

9. Children

Nibbo is not directed at children under 13 (or the minimum age in your country, up to 16 in the EEA). We do not knowingly collect personal data from them and do not show them personalised ads.

10. Changes

We will update this page when our practices change and change the date at the top. Material changes will be announced on the site before they take effect.