Privacy Policy

Last updated:

1. Who we are

GenerateQuick ("we", "us", "our") operates generatequick.com (the "Site"). We are the data controller for personal data collected through the Site. For any privacy-related queries, please use our contact form.

This policy explains what personal data we collect, why we collect it, the legal basis under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and your rights.

2. What data we collect and why

a. Server access logs

When you visit the Site, our hosting provider automatically records standard server log data:

  • IP address
  • Browser type and version
  • Operating system
  • Pages accessed and timestamps
  • Referring URL (the page you came from, if any)

We use this data to maintain the security and performance of the Site. We do not use it to identify you personally, and we do not combine it with any other data source.

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR). We have a legitimate interest in protecting the Site from abuse and understanding aggregate usage patterns to improve it. This interest is not outweighed by your rights given the limited nature of the data and the fact that it is not used to profile you individually.

b. Contact form

When you submit our contact form you provide your name, email address, and message. We use this information solely to respond to your enquiry and then retain it for no longer than is necessary to do so.

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR). Processing your message is in both your interest and ours so that we can respond to what you have sent us.

c. What we do not collect

We do not ask for payment information. We do not require an account or registration. We do not use advertising networks, tracking pixels, or analytics services. The majority of our tools process everything in your browser; files you upload (PDFs, images) and data you enter (text for QR codes, invoice details, citation details, and so on) are never sent to our servers. We have no access to them.

Color Palette Generator — AI Generate exception: when you use the AI Generate feature of the Color Palette Generator, the description text you type is transmitted to our server, which then forwards it to the Groq Inc. API to generate a colour palette. We do not store your description after the API call completes. However, your description text is processed by Groq and may be subject to their data handling practices. See Section 4 for further details. The From Photo and Hand Picked modes of the same tool run entirely in your browser and do not transmit any data to our servers or third parties.

Meme Generator exception: when you use the Meme Generator, your browser makes direct requests to the imgflip.com and memegen.link APIs to fetch the list of available meme templates. These requests originate from your browser, not our servers, and will disclose your IP address to those services. We do not control those requests or the data those third parties may log. See Section 4 for further details.

3. Cookies and local storage

We set one strictly necessary cookie: an anti-forgery token generated by ASP.NET Core that protects form submissions against cross-site request forgery (CSRF) attacks. It is a session cookie and is deleted when you close your browser. It does not track you across sessions or sites.

Some tools save your last-used settings (for example the last barcode format you selected) to your browser's localStorage. This data is stored entirely on your device and is never transmitted to us. You can delete it at any time by clearing your browser's site data.

Because we use only strictly necessary cookies, we are not required under the Privacy and Electronic Communications Regulations 2003 (PECR) to display a cookie consent banner. If we ever introduce non-essential cookies we will update this policy and seek your consent first.

4. Who we share your data with

We do not sell or rent your personal data. We share data only with the following service providers where technically necessary to operate the Site:

Hetzner Online GmbH (hosting)

Our servers are hosted by Hetzner Online GmbH, based in Germany. Hetzner processes server access logs as part of providing hosting infrastructure. Their Privacy Policy applies to data they process.

Google LLC (email delivery)

Contact form messages are delivered to us via Google's email infrastructure (Gmail SMTP). Google processes your name, email address, and message solely to deliver the email. Google's Privacy Policy applies to data they process.

jsDelivr (content delivery network)

When you visit the barcode generator, your browser loads a JavaScript library from the jsDelivr CDN, operated by Prospect One sp. z o.o. (Poland). jsDelivr may log your IP address as part of standard CDN operation. Their Privacy Policy applies to data they process.

Groq Inc. (AI palette generation)

When you use the AI Generate feature of the Color Palette Generator, the description text you enter is sent from our server to the Groq API, operated by Groq Inc., based in the United States. Groq processes this text solely to generate a colour palette response. We do not store the description text after the API call completes, and we do not share any other personal data with Groq. Groq's Privacy Policy applies to data they process.

imgflip.com (Meme Generator templates)

When you use the Meme Generator, your browser calls the imgflip.com public API to retrieve a list of popular meme templates. imgflip may log your IP address as part of this request. GenerateQuick is not a party to that request; we do not receive or store any data from it. imgflip's privacy policy applies to data they collect.

memegen.link (Meme Generator templates)

When you use the Meme Generator, your browser also calls the memegen.link public API to retrieve additional meme templates. memegen.link may log your IP address as part of this request. GenerateQuick is not a party to that request; we do not receive or store any data from it. memegen.link's privacy policy applies to data they collect.

5. International data transfers

Hetzner and jsDelivr are based within the European Economic Area (EEA). The UK has confirmed that EEA countries provide adequate protection for personal data under UK GDPR, so no additional safeguards are required for transfers to these processors.

Google LLC is based in the United States. Google relies on Standard Contractual Clauses incorporating the UK Addendum to the International Data Transfer Agreement (IDTA) as an appropriate safeguard for international transfers from the UK, as permitted under Article 46 UK GDPR. You can find details in Google's Privacy Policy.

Groq Inc. is based in the United States. When you use the AI Generate feature of the Color Palette Generator, your description text is transferred to Groq's servers in the US. We are unable to confirm the specific transfer mechanisms Groq relies on for UK-to-US data transfers, and we recommend reviewing Groq's Privacy Policy if you have concerns.

imgflip.com and memegen.link are operated by US-based entities. As noted above, requests to these APIs are made directly by your browser, not by our servers. These are independent third-party services outside GenerateQuick's control. We are unable to confirm what transfer mechanisms, if any, they rely on, and we recommend reviewing their respective privacy policies if you have concerns about how they handle your IP address.

6. How long we keep your data

  • Server access logs are retained by Hetzner for up to 30 days for security and diagnostic purposes, after which they are deleted.
  • Contact form messages are kept for as long as is necessary to address your enquiry. Once resolved, we delete the correspondence.

7. Your rights under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Access. You can request a copy of the personal data we hold about you (a Subject Access Request).
  • Rectification. You can ask us to correct personal data that is inaccurate or incomplete.
  • Erasure. You can ask us to delete your personal data where we no longer have a lawful reason to hold it.
  • Restriction. You can ask us to restrict our processing of your data in certain circumstances, for example while a complaint is being resolved.
  • Portability. Where processing is based on your consent or a contract, you can receive your data in a structured, commonly used, machine-readable format.
  • Object. You have the right to object to processing based on our legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
  • Complain to the ICO. If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to resolve any concern with you directly first.

To exercise any of these rights, please use our contact form. We will respond within one month as required by UK GDPR. There is no charge for making a request unless it is manifestly unfounded or excessive.

8. Children

Our Site is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted personal data to us via the contact form, please let us know and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Last updated" date at the top of this page when we do. We encourage you to review this page periodically.

10. Contact us

For any questions about this Privacy Policy or to exercise your data rights, please use our contact form. We aim to respond within one month.