Privacy policy

fastast is a set of free tools you can use without an account. This policy describes what happens to the data that passes through the site, under the General Data Protection Regulation (GDPR).

The short version

There is no sign-up, no e-mail address to give and no profile to fill in. What you type into a tool is computed and handed back to you; it is not saved anywhere. The site does carry audience measurement and advertising from Google, and both stay switched off until you say otherwise.

Who runs this site

fastast.com is published by ARCATE, a French simplified joint-stock company (SAS) registered under SIREN 908 556 046, whose registered office is at 2 impasse des Sablieres, 44470 Carquefou, France. ARCATE is the data controller. Write to contact@arcate.fr for anything concerning your data. No Data Protection Officer has been appointed.

What the tools do with what you type

Every tool here works the same way. Your input travels in the body of one request, the answer is computed on the server and sent straight back, and nothing is written to a database. There is no account to attach it to, and no record is kept once the response has been sent.

None of the following is stored, and none of it appears in any log: the settings you choose for a generated password, or the password itself; an IBAN you check or turn into a payment QR code; the name, telephone number and e-mail address you put into a vCard QR code; a Wi-Fi network name and its key; the date, time and place of birth used for a birth chart or a compatibility chart; a sudoku grid.

Two cases deserve to be spelled out, because they behave differently:

• Place-name suggestions. When you type a city into the coordinates tool, or into a form that asks for a birthplace, what you type is sent as part of the web address rather than in the request body. It therefore appears in the web-server access log, next to your IP address, and stays there as long as those logs do. The place itself is matched against a copy of the GeoNames database held on our own server; nothing is sent to a third party to do it.
• The form builder. A form you build is encoded entirely inside the link you share. It is not saved on the server, and it is not ours to read. Answers given to such a form never leave the visitor's browser: the only delivery option this version offers is none at all.

Server logs

Like any web server, ours records each request it answers: IP address, date and time, the host and address requested, the response status and size, the page you came from, and the identification string your browser sends. These records exist to keep the service running, to detect abuse and to diagnose faults, on the legal basis of our legitimate interest. They are kept for 14 days, then deleted.

Cookies

Before you make any choice, this site sets exactly one cookie, named XSRF-TOKEN. It protects forms against cross-site request forgery, is unreadable by scripts, is not shared with anyone, and carries nothing that would let a third party follow you from site to site. Being strictly necessary to the service you asked for, it requires no consent.

Everything else depends on your answer to the consent notice. If you visit from the European Economic Area, the United Kingdom or Switzerland, that notice is shown through a consent management platform certified by Google and built on the IAB Transparency and Consent Framework. Until you accept, Google's tags run in a mode that writes nothing to your device. You can reopen the notice and change or withdraw your choice at any time.

Audience measurement

We use Google Analytics to count visits and see which tools people actually use. It never receives your name or e-mail address, because we never ask for them. With consent denied, it stores no cookie and no identifier; with consent granted, it sets its own cookies to distinguish one visit from the next.

Advertising

This site is funded by advertising served through Google AdSense. Third-party vendors, Google included, may set cookies or read identifiers already on your device in order to serve advertisements, to measure whether they were seen, and to detect fraud. With your consent, they may also use that information to make the advertisements you see more relevant to you, including on the basis of your previous visits to this and other websites.

You can opt out of personalized advertising by Google at Google Ads Settings, and read how Google uses data when you use its partners' sites at policies.google.com/technologies/partner-sites. Google's own description of advertising cookies is at policies.google.com/technologies/ads.

Who else sees the data

• Hosting: Scaleway SAS, a French company (SIREN 433 115 904), on servers located in France, within the European Union.
• Audience measurement and advertising: Google Ireland Limited and Google LLC, under the conditions described above and only within the limits of the consent you gave.

Nobody else. We sell nothing, and we share nothing with data brokers.

Transfers outside the European Union

Google may process the data it collects in the United States. Those transfers are covered by the safeguards the GDPR requires, namely the EU-US Data Privacy Framework and, where applicable, standard contractual clauses. No transfer takes place before you have consented, and none involves anything you typed into a tool.

How long anything is kept

• What you type into a tool: not kept at all.
• Web-server logs, including place-name suggestions and IP addresses: 14 days.
• Audience measurement and advertising data: held by Google under its own retention rules, and only if you consented.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Write to contact@arcate.fr to exercise any of them.

In practice there is very little to exercise them on: because this site keeps no account and stores nothing you type, the only data we are likely to hold about you is a handful of log lines identified by an IP address, for at most fourteen days. Tell us the address and the approximate time and we can look; without them we have no way to find you, and no way to know it was you.

If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL, at www.cnil.fr.

Changes to this policy

This policy will change when the site does, and the date below says when it last did. Last updated: 21 August 2026.