Skip to content

Privacy policy

In short: the program collects nothing and never goes online. The website needs the bare minimum to be delivered to you.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Gaea Operations GmbH
Neuer Wall 10
20354 Hamburg
Germany

Represented by: Stefan Himmelskamp
Email: legal@gaeaoperations.com

We have not appointed a data protection officer, as the conditions of Art. 37 GDPR in conjunction with § 38 BDSG are not met. For all data protection matters you can reach us at the address given above.

2. The Zortio program

Zortio runs entirely on your computer. The program has no network functionality and never establishes a connection to us or to third parties.

No personal data is transmitted to us: no file names, no folder paths, no usage statistics, no crash reports, no device or installation identifier. There is no account, no registration and no licence check.

Purely locally on your device, Zortio stores two things: your most recent settings under %APPDATA%\Zortio, and a log per tidied folder in the hidden subfolder .zortio that makes the undo function possible. Neither leaves your computer and both can be deleted by you at any time.

3. Visiting this website (server log files)

When you visit this website, your browser transmits technically necessary data that our hosting provider stores in what are known as server log files:

  • IP address of the requesting device
  • date and time of access
  • name and URL of the retrieved file
  • amount of data transferred and notification of successful retrieval
  • browser type, browser version and operating system
  • previously visited page (referrer), if transmitted

Purpose: delivering the website, ensuring operational security and investigating misuse or fraud.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically faultless and secure operation of the website.
Retention: deleted after 30 days at the latest, unless a security incident requires longer retention.

This data is not merged with other data sources. It is not evaluated for advertising purposes.

4. Hosting

This website is hosted by an external provider that processes the data on our behalf and according to our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place with that provider. The legal basis for using them is Art. 6 (1) (f) GDPR.

5. Cookies and external content

This website sets no cookies of its own. Fonts, icons and all other content are delivered from our own server. No external font, map or video services are embedded. A consent banner is therefore not required for basic operation.

6. Advertising

This website displays advertising via Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Cookies may be set and personal data – in particular your IP address and information about your usage behaviour – may be transferred to Google, including to third countries, notably the USA. An adequacy decision of the European Commission exists for the USA (EU-US Data Privacy Framework). Google and other third-party vendors use cookies to serve ads based on prior visits to this and other websites. Before personalised advertising is shown for the first time, a Google-certified consent dialog asks for your decision (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG); without consent, at most non-personalised ads are shown. You can change your decision at any time with effect for the future – via the “Privacy settings” link at the bottom of the page, in Google's ad settings at adssettings.google.com, or for many vendors at once at youronlinechoices.eu. Further information: policies.google.com/privacy.

7. Processing of your files

Zortio runs entirely inside your browser. The folder you grant access to is read and modified locally through the File System Access API. Neither the files themselves nor file names, folder paths, checksums or any analysis of them leave your device; nothing is transmitted to us or to third parties. Access ends as soon as you close the page. Your settings are stored solely in your browser’s local storage – that data is not transmitted either.

8. Contacting us by email

If you write to us, we process your email address and the content of your message solely in order to deal with your request. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR for contract-related enquiries. We delete the data as soon as your request has been conclusively dealt with and no statutory retention obligations prevent it.

9. Your rights

You have the following rights towards us at any time regarding your personal data:

  • access (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing (Art. 21 GDPR)
  • withdrawal of consent given (Art. 7 (3) GDPR)

To do so, contact legal@gaeaoperations.com. Independently of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information.

10. Changes to this policy

We adapt this privacy policy as soon as our services or the legal situation change. The version published here applies in each case.

Last updated: 12 August 2026 · Legal notice · Terms of use