Privacy notice

The controller for the processing described here — the person who decides what is collected and why, and who answers for it — is the sole trader who operates this service, established in the Slovak Republic. Data protection questions and requests go to the privacy address on the site information page and are answered by the same person who runs the service; there is no support department to be passed between. The controller’s full legal identity is disclosed to the supervisory authority, and to a court, on request.

It covers this website and the download service behind it. It does not cover the platforms whose links you paste. When you give SaveOtter a link to a post on another service, that service is a separate controller with its own privacy notice, and the fact that a request was made for that post may be visible to it.

Nor does it cover what you do with a file after you have it. Once the file is on your device it is out of the service entirely, and this notice makes no claims about it.

Everything the service records, in the order it happens. Nothing is collected because it might be useful one day.

The address you submit, and the request that carries it

When you paste a link and press the button, the service records the address itself, the IP address the request arrived from, the time, the outcome, and — when something goes wrong — the error. The address is needed to do the thing you asked for. The IP address is not optional in the way the others are: a server cannot receive a request without seeing where to send the answer.

The file that comes back

The file is fetched to the server, held there so you can collect it, and deleted afterwards. During that window it exists on a disk the operator controls. This is stated plainly because the alternative — implying files pass through untouched — would not be true of any service that works this way, including this one.

Server request logs

The web server records requests it receives: IP address, time, the path requested, the response code, and the browser string your browser sends. These exist so that an outage can be diagnosed and an attack can be recognised. They are not read to build a picture of any individual visitor.

Where you are

Not derived, and not looked up. Your IP address is never sent to a geolocation service, so nothing in these records says which country, city or network you are on. This used to work the other way round: every address went to a third-party lookup service, in clear text, so that an admin dashboard could show a flag. That was never worth what it cost, and it has been switched off rather than encrypted.

Anything you write to us

If you send an email — a question, a takedown notice, a request about your own data — the message and the address it came from are kept so it can be answered, and afterwards as a record that it was answered.

A web address is not neutral. The link to a video can say what someone watches, which community they follow, what they are researching, sometimes what they believe or who they are. Held next to an IP address it stops being a technical string and becomes a statement about a person.

The Court of Justice has taken this view of data that indirectly reveals sensitive characteristics, and this service accepts it rather than arguing round it. The practical answer is not a warning in a policy — it is that the pairing exists for days rather than years, is never aggregated into a profile, is never used to segment or target anyone, is never sold, and is never used to train anything.

Fixed periods, applied automatically. A period that depends on somebody remembering to run a cleanup is not a period.

The list is short, and it is the whole list. Nobody receives this data for their own purposes.

• The hosting provider for this website, which serves the pages and sees the requests to them.
• The network provider that publishes the download service and protects it from attack. It terminates the encrypted connection, so it can see the address you submit and the file that comes back — not merely the fact that a connection happened. Saying otherwise would be comfortable and wrong.
• The platform whose link you submitted, which sees a request for that content.

The first two act on instructions under a data processing agreement and may not use the data for anything of their own. The third is not a processor: it is a separate controller that you chose by choosing the link, and it applies its own privacy notice.

Data would also be disclosed to a court or authority where a valid, binding legal order requires it. There is no standing arrangement with anyone, no bulk feed, and no voluntary disclosure.

The service is operated from Slovakia and the download server is physically in Slovakia. Some of the providers listed above are established outside the European Economic Area or process data there.

Where that is so, the transfer rests on an adequacy decision for the destination country, or on the European Commission's standard contractual clauses, together with the transfer risk assessment those clauses require. You can ask for a copy of the safeguards in place for a specific provider at the privacy address.

Absences are a design decision, and they are easier to verify than promises — open the page source and check.

• No analytics of any kind. No Google Analytics, no Plausible, no self-hosted equivalent.
• No advertising, no advertising identifiers, no remarketing, no conversion pixels.
• No third-party scripts on the page at all. Fonts are served from this domain, not a font CDN.
• No geolocation lookup. Your IP address is not sent to anyone to work out where you are.
• No accounts, so no name, no email, no password, and nothing that links one visit to the next.
• No profiling and no automated decision-making within the meaning of Article 22.
• No selling, renting or sharing of personal data, on any terms, to anyone.
• No use of anything you submit to train a machine learning model — ours or anyone else.

These apply whether or not you are in the EU, because they are applied to everyone rather than checked against a location.

• Access — ask what is held about you and get a copy (Article 15).
• Rectification — have something inaccurate corrected (Article 16).
• Erasure — have it deleted (Article 17).
• Restriction — have processing paused while a dispute is resolved (Article 18).
• Portability — receive what you provided in a machine-readable form (Article 20).
• Objection — object to anything done on the basis of legitimate interests, including the retention of your IP address and the request logs (Article 21). No reason is required for direct marketing; there is none here in any case.

Write to the privacy address. A reply comes within one month, and free of charge. There is no form to fill in and no account to prove.

Nothing here relies on consent, so there is no consent to withdraw. If that ever changes, withdrawing will be as easy as giving it.

If you think this service has handled your data wrongly, tell us first — it is faster, and a genuine mistake gets fixed rather than defended. You do not have to, and doing so does not affect any other right.

You can complain to a supervisory authority directly, either in the country where you live, where you work, or where the alleged infringement happened. The authority for this service is:

The service is not directed at children and asks for no age. It also has no accounts and no profile, so there is nothing that accumulates about a young visitor over time — which is the harm the rules on children's data exist to prevent.

If you are a parent or guardian and believe a child's personal data has ended up here, write to the privacy address and it will be deleted.

The version and date at the top change whenever the text does. A change that widens what is collected, lengthens how long it is kept, or adds a recipient will be announced on the site before it takes effect, not slipped in with a new date.

Superseded versions are kept and can be requested at the privacy address, so a statement made at the time you used the service can still be checked afterwards.