Last updated 18 October 2026
In short: your measurement files and images are analysed only in your browser and are never uploaded. Only what you choose to send in the review or bug-report forms is sent to us. We also store your email address if you sign up, and simple anonymous counts of how the tool is used.
The controller of personal data on is , trading as (business ID ), . Contact: .
The files you load (DLS measurements, TEM images) and the results are processed only on your computer, inside your browser. They are not sent to our servers or to anyone else.
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address, sign-up date, plan | Your account and sign-in links | Contract, Art. 6(1)(b) |
| Usage events: type (analysis, PDF download, TEM sizing, contact-button click) and time; for signed-in users, linked to the account | Running the account, counting free checks, improving the tool | Contract and legitimate interest, Art. 6(1)(b) and (f) |
| For visitors without an account: a random ID stored in your browser and a one-way hash of your network address | Enforcing the free monthly limit for visitors without an account (10 checks a month) and preventing abuse | Legitimate interest, Art. 6(1)(f) |
| Website statistics (page views, country, browser), without cookies | Understanding visits | Legitimate interest, Art. 6(1)(f) |
| Reviews you send: star rating, text, and the name and affiliation if you give them; whether you agree to public display | Collecting feedback. Shown publicly only if you tick the box and after we have checked it | Consent, Art. 6(1)(a) |
| Bug reports you send: description, optional email, optional screenshots (PNG or JPG), and automatically the app version, step, browser and operating system | Finding and fixing problems; answering you if you gave an email | Legitimate interest, Art. 6(1)(f) |
| Emails you send us | Answering you | Legitimate interest, Art. 6(1)(f) |
We do not sell data, show ads, or use tracking cookies.
The site stores a few items in your browser: the sign-in session, the random guest ID, and whether you have seen the disclaimer. These are needed for the service to work and are not used for tracking across websites. You can clear them at any time in your browser settings.
Each provider processes data only on our instructions under a data processing agreement. If paid plans are introduced, payments will be handled by a payment provider acting as merchant of record; this policy will be updated first.
You can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. You can delete your account yourself from the account menu (“Delete my account”). For anything else, email . You also have the right to complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Connections are encrypted (HTTPS). Sign-in uses one-time email links, so there are no passwords to leak. Database rules allow each user to see only their own account.
We will update this page when things change and tell registered users by email about important changes.