Privacy Policy

Last updated: 2025-12-21

1. Data Controller

The data controller for data processing on this website is:
Benjamin Blatti
Thun, Switzerland
E-Mail: privacy@loadsh.it

2. Overview of Processing

The following overview summarizes the types of data processed and the purposes of their processing:

  • Usage Data: Visited pages, access time, browser used
  • Content Data: Files uploaded for processing (deleted once the job finishes)
  • Contact Data: Email address (only upon registration)
  • Account Data: Selected tier, credit balance, and account settings (upon registration)
  • Security and Authentication Data: Two-factor configuration (TOTP/SMS), passkeys, phone number (only for SMS 2FA), API keys, and login history (time, approximate location, device) for abuse detection

3. Legal Basis

Data processing is carried out in accordance with Swiss Data Protection Act (DPA) and, where applicable, the EU GDPR:

  • Consent: For optional features
  • Contract Fulfillment: For providing our services
  • Legitimate Interests: For security and operational stability

4. Cookies and Local Storage

We only use technically necessary cookies and local storage for:

  • Session Token: For authentication of logged-in users
  • Theme Setting: Storage of your preferred color setting (Light/Dark)
  • Language Setting: Storage of your preferred language
  • Cloudflare Turnstile (CAPTCHA): To protect login and contact forms against automated abuse; Cloudflare may set a technically necessary cookie. No tracking for advertising purposes takes place.
  • Anonymous session: For users who are not logged in, to track the status of a job (upload, progress, download); automatically deleted after 24 hours.
  • Trusted device (optional): Only if you enable “Trust this device” at login: stores an identifier to skip the two-factor prompt on this device for up to 30 days.

For logged-in users, session and profile details (e.g., email address, user ID, tier) are additionally stored locally in the browser to provide the interface.

When you use our tools, simple usage counters (e.g., the number of conversions today) are stored exclusively locally in your browser to show you an activity overview. This data never leaves your device and is not transmitted to us or to third parties.

We do NOT use tracking cookies and do not deploy third-party analytics tools like Google Analytics.

5. Data Processing When Using Our Services

5.1 Media Processing (Client-side)

For local processing in the browser:

  • Files are processed directly in your browser
  • No data is transferred to our servers
  • Processing takes place entirely on your device

5.2 Compute Processing (nodrift.ch)

When using external compute resources via nodrift.ch:

  • Your file is briefly cached on loadsh.it infrastructure (Cloudflare R2) for forwarding and handed over to nodrift.ch from there. The result stays with nodrift.ch and is only passed through when you download it, not stored with us.
  • This caching serves only to carry out the job – see section 5.3 for deletion. Scan and transcription results remain as text in your job history until you delete the entry or your account.
  • Processing takes place on nodrift.ch infrastructure, which you linked to your account via OAuth.
  • You are responsible for the legality of the processed content

Note: loadsh.it provides the user interface; the free tools run entirely locally in your browser. With Boost, nodrift.ch handles processing and billing.

5.3 File Conversion

When using the conversion service:

  • Uploaded files are only used for conversion
  • Uploaded files are deleted as soon as processing finishes; after seven days at the latest
  • We do not analyze the content of your files

5.4 Security Scan

The file scanner checks files for malware:

  • Files are checked for viruses and malware
  • After the scan, the uploaded file is deleted; the scan result stays in your history
  • Hash values may be stored anonymously to improve detection

5.5 External Compute Services (nodrift.ch)

When connecting to the external compute service nodrift.ch, the following data is transmitted:

  • Email Address: To identify your nodrift.ch account
  • Technical Metadata: Container status, credits balance
  • File contents and inputs: For boost/AI processing, the file contents, file names, and any text inputs (prompts) you provide are transmitted to nodrift.ch for processing and handled there in accordance with their privacy policy.

The connection is made via OAuth 2.0. You can disconnect at any time in the compute settings. Upon disconnection or account deletion, all stored tokens are automatically revoked at nodrift.ch. For data processing by nodrift.ch, their privacy policy applies.

6. Server Logs and IP Addresses

Each access to our website captures the following data in server logs:

  • IP address (anonymized by shortening the last octets)
  • Date and time of request
  • Requested page/file
  • Browser type and version
  • Operating system

This data is stored for a maximum of 30 days to ensure system security and then automatically deleted.

To detect login anomalies and fraud attempts, we additionally process the approximate origin (country/region) and device information at login. This security data is likewise deleted or anonymized after no more than 30 days.

7. Hosting and Data Processors

We use the following carefully selected providers as data processors:

  • Cloudflare, Inc. (Hosting, CDN, DDoS protection, and Turnstile CAPTCHA) - Privacy Policy
  • nodrift.ch (boost processing and credit billing) - see section 5 - Privacy Policy
  • Resend & Brevo (Sendinblue) (sending transactional emails, e.g., login codes and security notifications) - Privacy Policy
  • Twilio (sending SMS codes, only when SMS two-factor authentication is enabled) - Privacy Policy
  • Google & GitHub (login/registration, only if you sign in via this provider)

Data processing agreements exist with all providers in accordance with Art. 28 GDPR and Art. 9 Swiss DPA.

8. Your Rights

According to Swiss DPA and EU GDPR, you have the following rights:

  • Right of Access: You can request a copy of your stored data
  • Right to Rectification: You can request correction of incorrect data
  • Right to Erasure: You can request deletion of your data
  • Data Portability: You can receive your data in a common format
  • Right to Object: You can object to processing

To exercise your rights, contact us at: privacy@loadsh.it

Logged-in users can directly settings export or delete their data.

9. Data Security

We employ the following security measures:

  • SSL/TLS encryption for all data transfers
  • Encrypted storage of sensitive data
  • Regular security updates
  • Access restrictions and logging

10. No Sharing with Third Parties

We do not sell, rent, or share your personal data with third parties for advertising purposes. Sharing only occurs:

  • With carefully selected data processors (hosting, email/SMS delivery, boost processing) under appropriate contracts - see section 7
  • Under legal obligation (government requests)

When purchasing paid credits, the purchase is made through your nodrift.ch account; the contractual and payment partner is nodrift.ch. loadsh.it does not process any payments itself and does not receive payment data (e.g., credit card details).

11. Minors

Our service is aimed at persons aged 16 and over. We do not knowingly collect data from children under 16.

12. Changes to this Privacy Policy

We reserve the right to update this privacy policy as needed. The current version can always be found on this page.

13. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

14. Contact

For privacy questions, contact us at:
E-Mail: privacy@loadsh.it

Home Imprint Terms