The Lost Office Tools web apps for microsoft office

Privacy Policy

Last updated: 3 July 2026

1. Controller / Operator

Luc B.
Espenstreet 45b
CH-8867 Niederurnen /Glarus Nord

Contact: tlot [at] benven.ch

2. What this site is

The Lost Office Tools (www.thelostofficetools.com) is a free, hobby website offering browser-based tools for Microsoft Office. Most tools process your files entirely in your browser — your files are never uploaded. Two optional features send data to our own server, and only when you actively choose to use them: an anonymous feedback widget (section 3.5) and an optional "deeper" document validation (section 3.6). This privacy policy explains what limited data is processed when you use the site.

3. Data we process

3.1 Web server access logs

When your browser requests a page, the web hosting provider automatically records: your IP address, browser type and version, operating system, the URL you requested, the referring URL, date and time, and the HTTP status code. This is standard for every web server. These logs are used solely for technical operation and security; they are not used for tracking or profiling. Retention period: approximately 30 days, as set by the hosting provider.

3.2 Third-party CDN (jsDelivr)

Some tools load open-source JavaScript libraries from jsDelivr (cdn.jsdelivr.net), a public content delivery network. When your browser fetches these files, your IP address and standard browser headers are sent to jsDelivr's servers. See jsDelivr's privacy policy for details.

3.3 Browser local storage

This site stores your theme preference (light or dark mode) in your browser's local storage. This data stays on your device only and is never transmitted to or accessible by the server.

3.4 Cloudflare (network delivery & security)

This website is served through Cloudflare, a reverse-proxy and content-delivery network that sits in front of our server. Every request passes through Cloudflare, which processes your IP address and standard request headers to deliver the site, protect it against attacks and abuse, and provide the bot-protection check used by the feedback widget (Cloudflare Turnstile, see 3.5). Cloudflare may set strictly necessary security cookies for this purpose; these are not used for tracking or profiling. See Cloudflare's privacy policy for details.

3.5 Anonymous tool feedback

Each tool has an optional thumbs-up / thumbs-down button with an optional short comment. If you choose to send feedback, the following is transmitted to and stored on our own server (in our database): your rating, which tool it is about, your optional comment (plain text, max 150 characters), the interface language, a two-letter country code (derived from Cloudflare's country header, kept for aggregate statistics only) and the date and time.

We do not store your IP address. To allow only one vote per tool per day, your IP address is combined with a secret value and converted into a non-reversible cryptographic hash; only that hash is stored and it cannot be turned back into your IP address. To keep out automated spam, sending feedback runs a Cloudflare Turnstile check — your browser contacts Cloudflare and our server verifies the result with Cloudflare (which receives your IP address for that check). The comment field is free text, so please do not enter names, contact details or any other personal information in it. Feedback is anonymous; because it cannot be linked back to you, we are generally unable to locate or delete an individual entry on request.

3.6 Optional server-side document validation (deep analysis)

The Microsoft Office File Analyzer works entirely in your browser by default. It also offers an optional "deeper analysis" that validates your document against the official Microsoft Open XML schemas. This is the one exception to the "files stay in your browser" rule, and it runs only after you explicitly start it. When you do, your file is uploaded to our own server, read into memory, validated and immediately discarded — it is never written to disk and never stored. Only the resulting list of technical validation messages is returned to your browser. Because the file does leave your device, do not use this optional step for documents you are not permitted to share.

4. What we do not do

  • This website sets no cookies of its own and uses no tracking cookies. Cloudflare (see 3.4) may set strictly necessary security cookies.
  • We use no analytics services (no Google Analytics, no Matomo, etc.).
  • We have no user accounts and no sign-up. The only optional input is the anonymous feedback comment (see 3.5), which should not contain personal data.
  • Files you open with the tools are processed entirely in your browser and are never uploaded — with the single exception of the optional server-side validation (see 3.6), which uploads a file only when you explicitly start it and never stores it.

5. Legal basis

Processing of server access logs and Cloudflare's security processing is based on our legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR; Art. 31 nDSG). When you submit tool feedback (section 3.5) or start the optional document validation (section 3.6), the related processing is based on your consent, given by that deliberate action (Art. 6(1)(a) GDPR); you are free to simply not use these optional features.

6. Third-party services summary

ServicePurposePrivacy information
Web hosting providerServes this websiteProvider's own policy applies
CloudflareNetwork delivery, security & bot protection (Turnstile)cloudflare.com/privacypolicy
jsDelivr CDNDelivers JavaScript librariesjsdelivr.com/privacy

7. Your rights

Under the GDPR and the Swiss Federal Act on Data Protection (nDSG), you have the right to:

  • Access — request a copy of data held about you
  • Correction — request correction of inaccurate data
  • Deletion — request erasure of your data (where legally permitted)
  • Restriction — request that processing be limited
  • Objection — object to processing based on legitimate interest
  • Portability — request data in a structured, machine-readable format

To exercise these rights, contact: tlot [at] benven.ch

Swiss residents may contact the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.
EU/EEA residents may contact their national data protection authority.

8. Changes to this policy

This policy may be updated when the site changes. The current version is always available at this page. Material changes are indicated by an updated date above.