Privacy Policy

The shortest, most honest privacy policy you'll read this year.

TL;DR: Grabio has no account, no email, no phone number and no device tracking. Your files and links never reach us at all. We count two things - roughly how many people use Grabio, and which tools get used - using counters that cannot be traced back to any person. Your files are converted on your own iPhone and never uploaded. Links you share are never sent to us. The only thing we ever record is an anonymous count of how many times a download site was opened - a number, with nothing attached to it.

1. Who is responsible for your data

Grabio is an iPhone Apple Shortcut for file utilities (compress, convert, PDF, background remove, QR, and more). It is operated by Aditya R Sharma, an individual based in India.

Data Controller: Aditya R Sharma · India · [email protected]

2. What we collect and why

Data	Why	Lawful basis (GDPR)	Retention
Files you share to Grabio	Never sent to us. Photo, PDF, audio and QR conversions run entirely on your iPhone using Apple's own tools. Your files never leave your device.	No processing by us	Never stored
Links you share to Grabio	Never sent to us. A shared link is copied to your clipboard and pasted on the download site — it is never placed in any request to Grabio. We cannot see it.	No processing by us	Never stored
An anonymous install ID	A random number your iPhone generates once, so we can count how many people use Grabio. It is added to a counter (a HyperLogLog) and the value is then discarded. That structure can report a total but cannot list its entries, confirm whether a given ID is present, or link two visits. So we can count users but cannot identify or follow one. It is not your device ID, phone number or Apple ID, and it is never written to our logs.	Legitimate interest (knowing how many people use the product)	Only as an unreadable aggregate count
Which tool was used	When you use a tool we record that the tool ran - for example "remove background was used". Nothing is attached: no ID, no file, no link, no account. It tells us which features matter so we know what to build next.	Legitimate interest (product improvement)	Aggregate counts only
Anonymous redirect count	When Grabio opens a download site we count that one visit. No identifier, no link, no file - just a number going up.	Legitimate interest	Aggregate counts only
Standard web server logs	Normal request logs (page, status, time) kept by the web server for security and debugging, as with any website. These record the page requested but not the anonymous install ID.	Legitimate interest	Short-term, rotated

3. What we don't collect

No name. No phone. No address.
No behavioural analytics tied to you. Plausible (our self-hosted analytics) only counts aggregate page views with no personal data, no fingerprinting, no cookies.
No third-party ad networks. No Google Analytics. No Facebook Pixel. None.
No content of your files or URLs is logged. Servers process the bytes and forget them.

4. Subprocessors

These are the only third-party services that touch any Grabio data. We chose each one for privacy posture and minimal data exposure.

Provider	Country	What they do	What they receive
Hetzner Online GmbH	Germany (EU)	Server hosting	Anonymous page-open counts only — no files, links or personal data
Plausible (self-hosted)	Hosted on adityaarsharma.com infrastructure (Germany)	Aggregate page-view analytics	No personal data; aggregate counts only
Cloudflare	United States	DNS for grabio.adityaarsharma.com	Inferred IP at DNS resolution (not stored by us)
Apple iCloud	International	Distributes the Shortcut binary	Anonymous to us; Apple's terms apply

5. International transfers

Our server lives in Germany (Hetzner). Because Grabio no longer processes payments, has no accounts and never receives your files or links, there is no personal data to transfer anywhere.

6. Cookies

The public Grabio site does not use tracking, advertising, or analytics cookies. Plausible is cookieless by design. The only cookie set is an essential admin session cookie (used only when the operator logs in to the admin dashboard at /admin). Regular users will never receive a cookie from us.

7. Your rights (GDPR, CCPA, and others)

Wherever you live, you have the right to know what we hold, ask for a copy, ask for deletion, and complain to your regulator. To exercise any of these:

Access (Art. 15): Email [email protected]. In almost every case the honest answer is that we hold nothing about you at all.
Rectification (Art. 16): Grabio holds no editable personal data.
Erasure / Right to be Forgotten (Art. 17): There is nothing to erase - no device data, no files, no history.
Portability (Art. 20): JSON export, same as the access request.
Objection (Art. 21): Simply stop using Grabio. Nothing about you is retained either way.
Complaint (Art. 77): You can complain to your country's data protection authority. In India: Data Protection Board of India. In the EU: your national DPA.

8. Security

HTTPS everywhere (Let's Encrypt). Redis password-protected and bound to localhost. No device identifier is collected — unique users are counted from a random anonymous ID generated on your own device, never a hash of your device or any personal data. Files processed entirely on your own iPhone - no file is ever uploaded to us, so there is nothing on our side to store or delete. Admin dashboard is HTTP Basic Auth + signed session cookies. Backups are encrypted at rest on Hetzner and rotate every 24 hours.

9. Children

Grabio is not directed at children under 16. We do not knowingly process data from anyone under 16. Grabio collects no personal data from anyone, of any age, so there is nothing held about a child to begin with.

10. Automated decision-making

None. Grabio makes no automated decisions about you at all - there is no profiling, no scoring and no rate-limiting, because we hold no data about you.

11. Changes to this policy

If we add a subprocessor or change a retention period materially, we will update this page and announce it on the landing page footer. The "Last updated" date at the top tells you when we last changed anything.

12. Contact

Aditya R Sharma · India · [email protected]. Human reply within 24 hours on weekdays.