Policy
Privacy Policy
The short version: the data you paste into these tools is processed on your own device and is never sent to us. This page explains that in detail, and states plainly what we do collect.
Your content
Every tool on this site runs in your browser. When you paste text or open a file, that content is processed by JavaScript executing on your own machine, inside a Web Worker. It is not transmitted to this site, and there is no endpoint here that accepts it.
This is verifiable rather than a promise. Open your browser's developer tools, switch to the Network tab, and use any tool on the site: no request carrying your input appears, because none is made.
A practical consequence is that we cannot recover anything for you. Nothing is stored, so there is no history, no saved document, and no copy of what you converted. Closing the tab discards it.
Files you open are read with the browser's File API, which reads from disk directly into the page. Opening a file does not upload it.
What is collected
Optional operational analytics start only after you explicitly accept them in Privacy preferences. We count reported tool runs, successful and failed outcomes, download initiations and explicit tool selections. A report includes the tool identifier, interface language, a fixed run trigger and a safe error category when needed. Server receipt time supplies the date. Input, output, file names, option values, search text and raw diagnostic messages are never included.
These measurements describe opted-in reported actions, not people or all site activity. A download count means the download action was initiated, not that a file was saved. Canceled work and automatic generator previews are not counted. Signed-in administrator browsers are excluded. Public browser reports cannot be independently verified and may be lost when requests are blocked or storage is unavailable.
Independent random operation and event keys prevent duplicates and attribute downloads; they are not visitor or session identifiers. Those records expire after 48 hours. Safe failure details are retained for up to seven days, capped at 10,000 records. Daily tool and language totals are kept until the site owner deletes them. Expired records are removed when the collector next runs. No persistent offline queue is kept.
Declining does not affect the tools. You can reopen Privacy preferences in the footer and withdraw consent at any time. We honor Do Not Track and Global Privacy Control. Earlier activity and results created before consent are not replayed after acceptance. Short-lived anti-abuse counters are separate from reports. A deployment behind an explicitly trusted proxy may use a keyed address hash for rate limits; the analytics database never stores the raw address. These counters expire within two minutes.
Google Analytics is configured on this deployment, but loads only after separate third-party analytics consent. Accepting operational analytics does not enable it. Advertising features and ad personalisation signals are disabled.
Google receives the sanitized page location and technical information carried by the request, such as IP address and browser details. Query strings and fragments are omitted from our page-view calls. No input, output or file name is passed to those calls. Third-party scripts nevertheless execute in the page and carry a different trust boundary from first-party counters. Decline them when working with sensitive content. Withdrawing consent reloads the page to stop previously loaded code.
Hosting infrastructure may log request metadata such as URL, timestamp, IP address and user agent for pages, assets and telemetry endpoints. Our tool processors do not send input or output to these endpoints, so that content is not included in their requests.
The contact form
The one place on this site where information you provide is stored.
If you use the contact form, the name, email address, subject and message you type are stored so the message can be read and answered. That is the entire extent of it: four fields you filled in deliberately. Nothing about what you converted is attached, because the tools never send that anywhere.
Your email address is used to reply to you and for nothing else. It is not added to a mailing list, not shared, and not passed to any third party.
To limit automated abuse, a one-way hash of your IP address is briefly recorded when a message is submitted, so that a flood of submissions can be slowed. The hash is salted, which means the original address cannot be recovered from it, and these records are deleted automatically within a day. The IP address itself is never stored.
Messages are kept until they have been dealt with and are then deleted permanently. There is no archive and no soft-delete: when a message is removed it is gone. If you would like a message you sent erased before then, write to the same address and say so.
Advertising
This site does not currently display advertising. No advertising script is loaded, no advertising cookie is set, and no request is made to any ad network.
This site may display advertising in the future to support free access. If it does, this policy will be updated to describe what information advertising partners may collect, how advertising technologies are used, and the controls available to users as required by applicable law, and where consent is legally required before such cookies are set, it will be requested before they are.
The cookie policy lists every cookie this site can set and states which are currently active.
Storage on your device
A versioned consent preference is stored in your browser's local storage. It remembers your choices for operational analytics, third-party analytics and advertising, not a visitor identifier or tool content. If storage is blocked, optional tracking stays off. Clearing browser data removes this preference. A separate single privacy boundary timestamp signals other tabs to recheck admin eligibility; it contains no identity, tool content or browsing history. Cross-tab changes take effect when the browser delivers the signal, and suspended tabs recheck when resumed.
No account is required to use anything here, so there is no profile, no email address on file, and nothing to delete.
Your rights
Data protection regulations such as the GDPR and CCPA give you rights of access, correction and deletion over personal data held about you. Contact messages and hosting request logs may contain personal information. Operational aggregates have no visitor identifier, so they cannot be looked up as an individual history. To ask about data we hold or request deletion of a contact message, use the contact page.
Changes
If this policy changes in a way that affects what is collected, the change will be reflected on this page. Since the core design is that your content stays on your device, any change to that would be a change to the site itself, not merely to its wording.