Privacy Policy

1. Controller

Caruso Consulting UG (Haftungsbeschränkt)
Am Renngraben 7, 65549 Limburg an der Lahn, Germany
Represented by: Adriano Caruso
Email: info@caruso.consulting
Phone: +49 6431-2807181

2. General notes and purpose of processing

This website provides the free conversion tool MarkItDown, which lets users convert documents to Markdown. We apply strict data minimisation and collect only the data that is technically required to operate the website.

3. File processing in the browser

Most important note:

All uploaded files are processed exclusively locally in the user's browser. There is no transmission to our servers or any third party. The files never leave the user's device. Any storage, sharing or content analysis by the provider is technically excluded.

Text recognition (OCR) for images also runs in the browser. The required program files and language data (German, English) are served by us from markitdown.de. No content is loaded from third-party servers for this, and the language data is not cached in the browser. Once the page is closed or reloaded, files and results are fully removed from the browser's memory.

4. Server log files

When the website is accessed, our hosting provider (Lovable) automatically collects technically necessary information in so-called server log files. This includes:

IP address of the requesting device
Date and time of the request
Name of the requested page
Browser and its version
Operating system
Referrer URL

Legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in providing the website reliably and defending against attacks). Log files are stored for a maximum of 7 days.

5. Cookies and browser storage

We use no cookies for tracking, advertising or marketing and do not embed any ad networks. The website itself stores no data in your browser's local storage, session storage or IndexedDB. There is no history and there are no saved settings. Entries created in local storage by earlier versions of the website (conversion history, settings) are deleted automatically on your next visit.

The hosting provider sets two technically necessary cookies: __cf_bm from the network provider Cloudflare to protect against automated attacks (lifetime 30 minutes) and __dpl to deliver the current version of the website. These cookies contain no content of your files and are not used to recognise you for advertising or analytics. Legal basis is Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) lit. f GDPR.

6. Reach measurement

We use a first-party, anonymised analytics system provided by our hosting provider Lovable to measure the basic functionality and reach of the website. No cookies are set, IP addresses are truncated before any processing, and no personal evaluation or profiling takes place. Data is only processed in aggregated form.

Legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in providing and optimising a working website). You may object to this processing at any time by emailing info@caruso.consulting.

7. Web analytics and tracking

Beyond the reach measurement described in section 6, no further analytics or tracking tools are currently in use. In particular, Google Analytics 4 and Microsoft Clarity are not active. If introduced later, they would only be activated after a cookie consent banner is implemented and this privacy policy would be updated accordingly.

8. Email contact

When you contact us by email (info@caruso.consulting), the data you provide is used solely to handle your request. Legal basis is Art. 6 (1) lit. b and f GDPR. Data is deleted as soon as it is no longer required for the purpose for which it was stored.

9. Rights of data subjects

You have the following rights regarding personal data concerning you:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to lodge a complaint with a supervisory authority. The responsible authority is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.

10. SSL encryption

For security, this website uses TLS/SSL encryption. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar.

11. Currency and changes to this policy

This privacy policy is currently valid and dated October 2026. Due to further development of our website or changes in legal or regulatory requirements, this policy may need to be updated. The current version can always be viewed on this website.