Privacy notice: what is kept, and for how long

Last revised 14 September 2026

Who holds it

CECO L.L.C. (Kosovo, Business ID 812382810) is responsible for the documents you upload here and for the decisions about them described below. Write to ermallimaj32@gmail.com about anything on this page, including asking for a copy of what is held about you, or objecting to it.

Your documents

Uploaded so they can be corrected, and deleted after 90 days. They are not read by anyone, not used to train anything, and not shared with anyone. You can delete one yourself at any time, and you do not have to give a reason.

There is exactly one way any part of a document is kept for any other purpose, and it is the next section. It happens only when you press the button that does it.

If you choose to report a region

When we refuse a correction, you can send us the part of the page we could not handle. Only if you choose to: there is no setting that does it for you and no box that starts ticked.

What is sent is the region shown to you before you send it — the words you selected and a margin around them, at most 120 pixels on each side — together with which check refused, the measurements that check made, and any note you type. Not the file, not its name, not the other pages, not anything you corrected.

It is kept for 365 days, so that this kind of page can be measured against future versions of the tool. Erasing everything, below, erases these too.

Counting free usage

A cookie this site signs, plus a short one-way fingerprint of your browser and your network address. Hashed with a key held on the server, kept for one day, and used only to count corrections against the free allowance. It is not anonymous and we are not going to pretend otherwise: hashing an address makes it hard to read, not impossible.

Your email address, if you give one

Kept until you ask for it to be removed, together with the exact words you agreed to. Used to sign you in, to tell you about a purchase you made, and — if you asked to be told — once, when a plan opens.

Signing in with Google

If you choose it, Google tells us one thing: the email address of the account you picked, and whether Google has verified it. We ask for nothing else — no contacts, no files, no profile — and we cannot see anything else. Signing in with an emailed link instead involves no third party at all.

Paying

Payments are taken by Paddle, who are the seller of record. They handle the card and the tax; we never see a card number. What comes back to us is which plan was bought and the address that bought it.

Who at CECO can see your documents

Nobody, in the ordinary course of things. Documents are stored under the account that uploaded them and no part of the service displays their contents to anyone else.

There is an operator's view of the service, used to keep it running and to answer questions about payments. It shows counts, timings, plans and failure codes — how many corrections were made, which ones did not verify, what was bought — and it is built so that it cannot show the text of a document, the words corrected, or a filename. Reaching it requires an address named in the server's own configuration and a sign-in from the last few hours.

What is never logged

The text of your documents, the words you corrected, and the filenames. Those are the parts that carry names and identification numbers, so they are dropped at the logging boundary rather than trusted not to appear.

The name of your file

We do not keep it. A filename in this line of work is often the name of the person the document is about, so what reaches us is its length and its extension — which is why a document is listed as “8c.pdf” if you look at it from another browser.

Your own browser remembers the name so the list is readable, in this browser only. It is not sent to us, it goes when you delete the document, and erasing everything erases it too.

The one exception is yours to make. A verification certificate (Business) can print a name for the document, and when you issue one you are shown the name your browser remembers so you can keep it, change it or leave it out. Whatever you choose is printed in the certificate and kept nowhere else; the certificate file is stored with the document and deleted with it.

Erasing everything

You do not have to ask, and you do not have to write to anyone. There is a button in the application that removes every document you have uploaded, any region you reported to us, the record of your usage, and your address if you left one. It happens immediately and cannot be undone.