Privacy Policy
Last updated: November 2, 2026.
This policy explains which data DarkBoxKit (darkboxkit.com) processes, for what purpose, with whom it may be shared and how you can exercise your rights, in accordance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018) and, for visitors from the European Union, the United Kingdom and Switzerland, the General Data Protection Regulation (GDPR).
1. Controller and contact
DarkBoxKit is maintained independently and is the controller of the data described on this page. For any privacy matter, write to contato@darkboxkit.com.
2. What DarkBoxKit is
DarkBoxKit offers free online tools, with no sign-up and no user account. Most tools run entirely in your browser: what you type or load into them (calculator entries, texts, label codes, files) is not sent to our servers. The exceptions are described in sections 4 and 5.
3. Data processed automatically
As with any website, when you visit DarkBoxKit our server records technical access data: IP address, date and time, requested page, browser and operating system. We use these records for security, to diagnose failures and for internal traffic statistics. The records are rotated daily and kept for about 14 days.
Legal basis: legitimate interest (LGPD, art. 7, IX; GDPR, art. 6(1)(f)), to ensure the security and operation of the service.
4. Tools that use external services
Some tools only work by querying third-party services. In those cases, the data indicated below is sent to the corresponding service, which processes it under its own privacy policy:
- Currency converter: ExchangeRate-API and Frankfurter (currencies queried).
- Weather forecast: OpenWeatherMap and wttr.in (city or location entered).
- Language translator: MyMemory and LibreTranslate (text to be translated).
- My public IP: ipify, ip-api and ipapi.co (your IP address, which is the purpose of the tool).
- Is it up? and Outage detector: allorigins.win (address queried).
- Speed test: httpbin.org (connection test data).
- Maps: OpenStreetMap/Nominatim (places searched).
- Website screenshots: page capture services (address entered).
Do not enter sensitive or confidential data in these tools.
5. Secret Santa
Secret Santa is the tool that uses one of our servers to run the draw. For this, the group name, the participants' names (as entered by whoever created the group) and the draw result are used. We do not ask for an email address, phone number or any other contact detail. We recommend using only names or nicknames.
This data is deleted automatically 60 days after the group is created. You can also ask for a group to be deleted earlier by writing to contato@darkboxkit.com with the group name.
Legal basis: performance of the service you requested (LGPD, art. 7, V; GDPR, art. 6(1)(b)).
6. Local storage in your browser
Some tools keep data only in your browser (localStorage), without sending it to the server, for your convenience: the calculator history, the automatic draft of the SLP label editor, the size of the editor's workspace and the history of the “Is it up?” checker. You can delete this data at any time in your browser settings (clear site data) or, in the calculator, with the “Clear history” button.
7. Cookies and advertising (Google AdSense)
DarkBoxKit is funded by advertising. We use Google AdSense, and Google and its partners may use cookies and identifiers to show ads, measure their performance and, if you allow it, personalize them based on your visits to this and other sites.
- European Economic Area, United Kingdom and Switzerland: Google may show a consent message. Personalized ads and advertising cookies are only used if you consent, and you can change your choice at any time through the message itself.
- Other countries: you can turn off ad personalization in adssettings.google.com and learn more about how Google uses data at policies.google.com/technologies/partner-sites. You can also block third-party cookies in your browser or visit aboutads.info and youronlinechoices.com.
- Without personalization, ads may still be shown, but not based on your browsing history.
- DarkBoxKit does not use its own tracking cookies and does not currently use analytics tools such as Google Analytics.
8. Who we share data with
- Google (AdSense), as described in section 7.
- External services used by each tool, as described in section 4.
- The server hosting provider, which stores the logs and the Secret Santa data.
We do not sell personal data.
9. International transfers
Some of the services mentioned operate outside Brazil and the European Economic Area (for example, in the United States). In those cases, the transfer relies on the applicable safeguards, such as standard contractual clauses and the providers' own certifications.
10. Your rights
You may request confirmation that we process your data, access, correction, anonymization or deletion, portability, information about sharing, withdrawal of consent and objection to processing based on legitimate interest. Write to contato@darkboxkit.com; we reply within 15 days. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) or, in the European Union, with the data protection authority of your country.
11. Children
DarkBoxKit is not aimed at children under 13 and does not knowingly collect their data. Secret Santa may be used by families; please ask a parent or guardian to enter the names.
12. Security
We use an encrypted connection (HTTPS) and restricted access to the server. No system is completely secure, but we take reasonable measures to protect the data.
13. Changes to this policy
We may update this policy. The date at the top shows the latest revision; relevant changes will be highlighted on this page.