Privacy notice for the free tools

This notice covers the free tools at wearedemarca.com/tools and the quote form on those pages. The short version: most tools run in your browser and never send us what you put into them, we count visits without cookies, and if you ask for a quote we use your details only to reply.

Who is responsible

The tools are run by DEMARCA, the design and marketing studio of GRANDEMARCA Sociedade Unipessoal Lda., Rua Dona Maria Rosália Tavares Proença Nº45, 6200-758 Tortosendo, Covilhã, Portugal. GRANDEMARCA is the controller: it decides how the data described here is used. You can reach us at hello@wearedemarca.com.

What the tools do with your input

Most tools, including the color, contrast, text, signature, favicon and Instagram grid tools, process everything on your device. The colors, text, images and files you use are not uploaded to us.

A few tools need a server to do their job:

• Website grader and the link, redirect, robots.txt and meta tag checkers. The address you enter is sent to our server, which fetches that public page (and, for the grader, its robots.txt, links and icons) and returns the result. We keep the address only in short-lived logs and rate limits, to stop abuse.
• HEX to Pantone. When you ask for the nearest colors, the hex code you entered is sent to our server, which compares it with the Freetone palette and returns the five closest colors. Nothing else from the page is sent, and the code is kept only in short-lived logs and rate limits.
• DNS checker. The domain name you enter is sent to our server, which asks six public DNS resolvers (Cloudflare, Google Public DNS, Cisco OpenDNS, AdGuard DNS, Control D and NextDNS) for its records. Those resolvers receive the domain name from our server, not your IP address. We keep the name only in short-lived logs and rate limits.
• SSL checker. The domain name you enter is sent to our server, which connects to that site to read its certificate and requests its home page over http:// and https://. The certificate is read by a small checker on our own web server, which receives only the domain name. We keep the name only in short-lived logs and rate limits.
• Alt text generator. The image you choose is sent to our server and to Cloudflare's AI service to write the description. It is processed in memory and not stored, and it is not used to train models.

Each of these tools says so next to the button before you use it.

Quote requests

When you send the quote form we receive your name, email address, and anything you add: your website, project type, budget range and message, plus the tool page you sent it from, the answer to the optional question some tools add to the form (for example when you plan to start), whether you came from the "Get a proposal using my results" button or the "Start a new project enquiry" link, and the campaign that brought you there, if any. A short summary of the result you had in the tool (for example the scope you built in a calculator or the grade of a page) is included only if you choose it: the box "Include a summary of my result from this tool" in the form, which "Get a proposal using my results" ticks for you and which you can untick, and the summary that button copies into the message box, where you can edit or delete it. Nothing is sent until you press the send button. We use this to reply to you and to prepare a quote. The legal basis is your request, that is, steps taken at your request before a possible contract (Article 6(1)(b) GDPR), and your consent, which you give with the checkbox and can withdraw at any time by emailing us.

We keep quote requests for up to 24 months after our last exchange, then delete them, unless you become a client, in which case our contract and accounting obligations apply. We do not add you to a newsletter and we do not sell or share your details.

Visit counts without cookies

We count page views and a few actions, such as using a tool, seeing the quote form or sending it, to learn which tools are useful. These events record which kind of action happened, never the figures, text or files you used in a tool. These counts do not use cookies, local storage or any device identifier. For each event we record the page, the tool, the referring website (without its query string), the campaign tags in the link you followed, a broad device type (mobile, tablet or desktop) and the country that Cloudflare derives from your connection. We do not store your IP address. Because nothing is stored on your device and no one is identified, this measurement runs without a consent banner.

The only thing a tool keeps in your browser is a note that you closed a prompt, held in session storage and removed when you close the tab.

Service providers

• Cloudflare, Inc. hosts the tools, runs the servers and database behind them, and processes technical data needed to deliver pages securely, such as your IP address.
• Resend delivers the email notification we receive when you send the quote form.

Both may process data outside the European Economic Area and the United Kingdom. Where they do, we rely on the safeguards they offer, such as the European Commission's standard contractual clauses and, where the provider is certified, the EU-US Data Privacy Framework and its UK extension.

Your rights in the EEA and the UK

Under the GDPR and the UK GDPR you can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time. Email hello@wearedemarca.com and we will answer within one month. You can also complain to a supervisory authority: in Portugal the Comissão Nacional de Proteção de Dados (cnpd.pt), in the UK the Information Commissioner's Office (ico.org.uk), or the authority where you live.

Notice for California and other US states

We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act and similar state laws. The categories we collect are identifiers and the information you choose to include in a quote request (name, email, website, message), and internet activity in the aggregate form described above. We collect them for the purposes in this notice and keep them for the periods above. You can ask to know, correct or delete the personal information we hold about you by emailing hello@wearedemarca.com, and we will not treat you differently for doing so.

Children

The tools are for business use. We do not knowingly collect personal information from children under 16 through the quote form.

Changes

If we change how the tools use data, we will update this notice and the date at the top.