Privacy notice

OmniBax is the website name. The website at omnibax.com is operated by PETRANA LLC (the “Company”), a Washington limited liability company based in Redmond, Washington, United States. The Company is the contracting party for the portal and the controller of personal data processed to operate it. References to OmniBax describe the website and its features, not a separate legal entity.

Use OmniBax support for website and account help, or the privacy request form for privacy requests and legal notices.

This notice applies to personal data processed to operate OmniBax. Use the privacy request form to ask about this notice or exercise a privacy right.

This notice covers the portal, customer accounts and tools. OmniBax serves a US-focused audience and is accessible to visitors elsewhere.

• Account and authentication data: our authentication provider processes sign-up, verification, recovery, sessions and security signals. OmniBax keeps an account identifier and the profile information needed to provide access.
• Essential service data: session information and temporary security records help keep you signed in, prevent unauthorized requests and limit abuse.
• Activity data: the tool used, page viewed or successful calculation, account identifier and time help us understand usage and improve the service. Tool inputs, results, IP addresses and user agents are excluded from this dataset.
• Public page totals: selected public pages add one to a daily total for that page group. The request address is checked against administrator-set exclusions but is not saved in this counter. It stores no visitor identifier, IP address, user agent, cookie or page query string. Reloads and automated requests may increase the total. Separate hosting and security logs may still contain connection information.
• Optional Matomo analytics: if you choose basic analytics, our Company-operated Matomo service receives a fixed public page address and title without query strings or fragments, plus ordinary connection and browser information. Basic mode uses no Matomo tracking cookies. Enhanced mode adds first-party Matomo cookies and browser features for returning-visitor and device reports. Matomo stores visit records with a two-byte IP mask; the service receives the connection IP before masking it. Account pages, forms, tool activity, outbound links and campaign sources are not sent to Matomo.
• External links: some marked provider links create limited OmniBax click records; direct partner links do not. Following a link connects you to the destination and, where applicable, an affiliate tracking service.
• Email data: when a message is sent through the OmniBax delivery service, delivery records contain protected recipient identifiers, message type, provider reference, delivery status and timestamps. These records exclude the address and message content. The sending provider receives the recipient address and message to deliver it.
• Hosting and security logs: web, error and security systems may process IP addresses, request paths, user agents, referrers, timestamps and diagnostics to operate and protect the service.
• Newsletter choices: if you opt in, we record your choice and any later withdrawal, linked to your verified account by a protected address identifier. When newsletter synchronization is active, a positive choice adds your address to our Company-operated mailing list; withdrawing the choice removes its subscription. Unsubscribing through a newsletter also withdraws the choice in your OmniBax account. These records are separate from the limited delivery records described above.
• Contact requests: we store the email address and message you submit in encrypted form, along with the selected request type, reference, processing status and timestamps. We use them to answer and manage your request. A delivery provider receives the address and brief receipt when a receipt can be sent; the receipt does not include your message.

• Contract and requested steps: create and secure an account, provide requested portal features, and complete a visitor-initiated provider handoff.
• Legitimate interests: operate and secure the portal, prevent abuse, diagnose failures, measure minimized product activity, maintain provider-data integrity and establish or defend legal claims. OmniBax limits these records and does not place tool inputs or results in activity analytics.
• Consent: optional Matomo analytics starts only after you choose basic or enhanced mode. You can decline or change that choice in Analytics choices in the footer. A first-party cookie keeps the choice for 180 days. Browser Do Not Track and Global Privacy Control signals prevent Matomo requests.
• Appearance: when you choose a light or dark theme, a first-party preference cookie remembers it across OmniBax subdomains for up to one year. Browser local storage can also remember the theme on that subdomain. This stores only the appearance choice, is independent of analytics, and does not identify you. You can change it with the theme button or remove it through your browser settings.
• Legal obligation: preserve or disclose information when a binding law, court order or regulatory duty requires it.
• Consent: optional marketing and any future nonessential browser technology. Consent can be withdrawn without affecting earlier lawful processing or required account and security messages.

Calculators and generators run in browser memory. Their inputs, files and results are not uploaded to OmniBax, written to browser storage or added to server-side tool history.

The public-IP tool returns the address visible to OmniBax for that request. RDAP and DNS lookups send only the required domain or record request through the OmniBax server to the named lookup provider. OmniBax does not save those searches or responses as tool history.

• Individual website and tool activity records: 30 days.
• Aggregate public page totals: 730 days. Raw Matomo visit records: 90 days; Matomo aggregate reports: 24 months.
• Aggregate Make affiliate metrics: 365 days.
• OmniBax email delivery records: 90 days; records used to prevent duplicate processing of delivery updates: 30 days.
• Resolved OmniBax contact requests: 365 days after resolution. Open requests remain until handled; legal duties or a dispute may require longer retention.
• Marketing consent and suppression evidence: retained while needed to honor the recorded choice and delivery safety requirements.
• Detailed service-change records: normally 365 days, with longer retention where an archive is still required. A limited audit record is retained after removal.
• Application diagnostic logs: rotated daily, with up to 14 log files retained.
• Our hosting provider confirms daily full-account backups with a three-day retention period, covering website files, databases, email and other recovery data. Server-level access, error and security records follow provider-controlled schedules; the provider has not specified separate retention periods for these logs while the hosting account remains active. The three-day backup period is not a log-retention period. Deleting an OmniBax user account does not terminate the hosting account. The Company uses the available account controls and assesses deletion requests separately for application data, logs and recovery copies.

OmniBax and our authentication provider use essential browser storage for authentication, request security and sessions.

The Analytics choices cookie stores your selection for 180 days. Basic Matomo analytics uses no Matomo tracking cookies. Enhanced Matomo analytics uses first-party cookies only after you choose it; you can withdraw that choice in the footer.

OmniBax does not use advertising cookies, cross-site behavioral advertising or third-party audience analytics.

• OrangeHost hosts the portal and account databases.
• Clerk provides customer identity, verification, recovery and session processing.
• Email delivery: Resend and Mailjet receive recipient addresses and message content when used to send OmniBax email. The Company operates its own subscription-management service using Listmonk software.
• Cloudflare Public DNS and authoritative RDAP operators receive the minimized lookup request and OmniBax server connection data for customer-requested network tools.

Providers and affiliate networks process information under their own privacy notices when you follow their links. A website listed on OmniBax is not necessarily a service provider processing data on our behalf.

• Make operates its own website and account services. OmniBax receives aggregate affiliate reports from Make.
• Impact may measure a marked affiliate handoff to Shopify. Shopify operates its own destination, account and commerce services.
• UptimeRobot receives visitors who choose its marked affiliate handoff and operates its own account and monitoring service.
• Hosting purchases are handled separately by the hosting provider; its checkout identifies LiquidNet Ltd. as the payment entity. Its own privacy notice covers the information you provide there.

The Company is based in the United States. The named service providers may process data in the United States and other countries where they or their subprocessors operate. Privacy protections and government-access rules can differ from those in the visitor’s country.

Use the privacy request form for information about processing locations and the transfer safeguards applicable to your personal data.

Send a privacy request

Marketing enrollment is optional, unchecked by default and can be withdrawn without affecting account or security messages.

Subject to applicable law, you may request access to, rectification or erasure of personal data; restriction of processing; or data portability. You may also object to processing based on legitimate interests or withdraw consent where those rights apply. Submit requests through the privacy request form. The Company may require information reasonably necessary to verify a request and may retain information where a legal obligation or applicable exception permits or requires retention.

Where applicable law provides a right to complain to a data-protection authority, you may exercise that right. Use the privacy request form to raise a concern or request assistance.

OmniBax does not use solely automated decisions that produce legal or similarly significant effects. Automated eligibility and abuse controls may refuse an email domain or temporarily rate-limit a request.

Send a privacy request

OmniBax is a US-focused website intended for adults age 18 or older. Visitors elsewhere may browse the website, optionally register for OmniBax tools and choose to follow provider links. A provider controls purchase eligibility and checkout on its own site. OmniBax is not directed to children, and the Company does not knowingly request children’s personal data.