Privacy Policy
Short version: the files you open and the text you type in the tools are processed in your browser and are not sent to us or anyone else.
What stays on your device
Images, PDFs, text, numbers and anything else you put into a tool are processed locally using your browser. We do not receive, store or have access to them.
What we collect
We do not ask you to create an account and we do not set advertising cookies. We do not set cookies and there is no tracking in your browser. The site does save a few small things in your browser's local storage, on your device only: a short list of the tools you recently used (shown on the home page), a counter of finished tasks and whether you dismissed the install prompt. These never leave your device, and you can remove them with the Clear button on the home page or in your browser settings. Like any website, our hosting provider receives standard server request data (such as IP address, browser type and requested URL) when your browser loads a page. This is used to deliver the site and keep it secure.
Third parties
- Cloudflare, Inc.: hosts and delivers this site (Cloudflare Pages) and may process request data as described above.
- Cloudflare STUN server: used only by the Private File Transfer tool to help two devices find each other. It sees the devices' network addresses, never your files or connection codes.
- Analytics: none at the moment. If we enable Cloudflare Web Analytics in future, it is a cookie-free, privacy-focused service and we will update this page.
- Advertising: none at the moment. If ads are added, we will update this policy and, where required, ask for your consent first.
Open-source components
Some tools load open-source libraries and models from this same site (not from a third party) only when you use them: pdf-lib 1.17.1, PDF.js 3.11.174, JSZip 3.10.1, heic2any 0.0.4, qrcode-generator 1.4.4, Mammoth 1.8.0, UPNG.js and pako, marked 12, js-yaml 4, ONNX Runtime Web 1.17.3 with the u2netp background-removal model, Tesseract.js 5 with language data, and FFmpeg compiled to WebAssembly (ffmpeg.wasm 0.12). They run in your browser and do not send your data anywhere. Some of these downloads are large (for example about 30 MB for the video engine) and are cached by your browser after first use.
Encrypted notes and file transfer
Encrypted notes are encrypted in your browser and the key sits in the part of the link after the #, which browsers do not send to websites. Private File Transfer connects two devices directly using WebRTC, with encryption between them. We do not store or see notes, files or connection codes.
Offline use
A service worker caches pages and scripts you have visited so they can work offline. This cache is stored in your browser and can be cleared in your browser settings.
Contact
Questions about privacy? Contact us.