Privacy policy
Last updated: 2026-11-04
This policy explains which personal data is processed when you use RefConvert, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
1. Controller
Asif Altaf
Weststraße 11
09648 Mittweida
Germany
E-mail: asifaltaf1987@gmail.com
A data protection officer is not required and has not been appointed.
2. Your references and files
Text you paste and files you upload are processed only in your browser on your own device. They are not transmitted to the operator or to any server, and the operator has no access to them.
3. Storage on your device
By default nothing is stored on your device. If you tick Remember my work in this browser, your text, records and settings are saved in your browser's local storage so they are still there when you return. This data never leaves your device. Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR. You withdraw consent by unticking the box, which deletes the stored data, or by clearing your browser data.
4. Hosting and server log files
The website is hosted on Cloudflare Pages by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you open a page, the host processes technical data that your browser sends automatically: IP address, date and time, page requested, referrer and browser type. This is necessary to deliver the website and protect it against attacks. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and working website. The operator has no access to these logs. Data may be processed in the USA. The provider states that it participates in the EU-U.S. Data Privacy Framework (Art. 45 GDPR); its status can be checked at dataprivacyframework.gov. Details: Cloudflare Pages privacy statement.
5. Crossref check (optional)
Only when you select Check with Crossref and confirm the notice that appears, the DOIs of your records, or for records without a DOI the reference text, are sent from your browser to the Crossref REST API, operated by Crossref (Publishers International Linking Association, Inc.), USA. Crossref receives your IP address as part of the request. Reference lists usually contain no personal data about you, but they contain the names of authors. Legal basis: your consent, Art. 6(1)(a) GDPR. Because Crossref is in the USA, the transfer is based on your explicit consent after being informed of possible risks, Art. 49(1)(a) GDPR: the USA may not offer a level of data protection equivalent to the EU. You can use RefConvert fully without this feature. Crossref's privacy policy: crossref.org.
6. Fonts and other external content
All fonts and program libraries are served from this website. No content is loaded from Google Fonts or other third-party servers.
7. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Contact the controller at the address above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your residence. For the operator, the competent authority is the Sächsische Datenschutz- und Transparenzbeauftragte, Dresden, Germany.
8. No automated decisions
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.