Privacy Policy

Introduction

Tools Planet (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we handle your data when you use our website and client-side tools.

The Short Version

We don’t track you. All tools run entirely in your browser. Your files never leave your device. We don’t use tracking cookies and we don’t show ads.

---

What We Collect (Spoiler: Almost Nothing)

1. Files You Process

What happens to your files:

• All file processing happens entirely in your browser
• Files are never uploaded to our servers
• Files may be temporarily held in your browser’s memory or sessionStorage while a tool runs
• Files are automatically discarded when you close the tab or start a new operation

We have zero access to your files. Everything runs client-side.

2. Website Analytics

If enabled, we use Cloudflare Web Analytics — a privacy-friendly analytics product that:

• Uses no cookies
• Collects no personal data
• Does no cross-site tracking
• Reports only aggregated, anonymous statistics (page views, country-level location, browser type)

What we do not use:

• Google Analytics
• Facebook Pixel
• Tracking cookies
• Browser fingerprinting
• Cross-site tracking

3. Technical Information

Your browser automatically shares the following with any web server, including ours:

• IP address — used for routing your request, not stored long-term
• Browser type (e.g., Chrome, Firefox)
• Operating system (e.g., Windows, macOS)
• Referrer URL

This is standard web server behavior. We do not retain server logs beyond what our hosting provider (Cloudflare Pages) holds for operational purposes.

---

Cookies & Local Storage

Cookies: None 🎉

We do not use cookies for tracking.

Local Storage & Session Storage

We use browser storage for functionality:

Storage	Purpose	Duration	Can be disabled?
sessionStorage	Temporarily hold files between steps in a tool	Until you close the tab	No (required for tools)
localStorage	Language preference	Persistent	Yes (site will use browser language)
localStorage	UI hints (e.g., dismissed onboarding)	Persistent	Yes (hints will reappear)

This storage is:

• Stored only on your device
• Never sent to our servers
• Not used for tracking
• Required for the site to function properly

Under GDPR and ePrivacy regulations, this kind of storage is classified as “strictly necessary” and does not require consent.

---

Your Rights (GDPR & Privacy Laws)

Even though we collect almost no personal data, you have rights:

Right to Access

Request a copy of any data we hold about you (spoiler: nothing personally identifying).

Right to Deletion

Request deletion of your data. You can do this yourself at any time by clearing your browser storage for our domain.

Right to Object

Object to data processing. Not applicable, as we don’t process personal data.

Right to Portability

Request your data in a portable format. Not applicable.

Right to Rectification

Request correction of inaccurate data. Not applicable.

To exercise your rights, contact us at the email listed below.

---

Third-Party Services

We rely on the following third parties:

Cloudflare Pages (Hosting)

• Purpose: Hosting the website and serving static files
• Data they handle: Standard HTTP request data (IP, browser type)
• Cookies: None served by us
• Privacy: Cloudflare Privacy Policy

Cloudflare Web Analytics (Optional)

• Purpose: Anonymous usage statistics, only enabled when configured
• Data they handle: Aggregated, anonymous traffic data
• Cookies: None

imgly CDN — AI background-removal model (Only when you use that tool)

• Purpose: Download the ~30MB machine-learning model and WebAssembly runtime that powers the “Remove Background” tool. Required to run the AI locally in your browser
• What’s sent to imgly: A standard HTTP GET request for static files (User-Agent + IP — same as any web request). No image data is ever sent. The model itself is read-only static content
• When it happens: Only on the first visit to /tools/image/background-remove/. After that the model is cached in your browser, no further fetches
• Why a CDN and not self-hosted: The model file exceeds our per-file deploy limits; hosting via imgly’s own CDN keeps the tool available without infrastructure becoming a bottleneck
• Opt-out: If you don’t visit the background-remove tool, no request to imgly is made

Cloudflare Pages Functions — Feedback relay (Optional, opt-in)

• Purpose: Forward anonymous user feedback (👍/👎 buttons on tool result pages) to our private issue tracker so we can improve the tools
• What’s sent: Only what you type in the feedback form (max 2000 characters), the tool name, your locale, and — only if you choose to fill it in — your email address for follow-up
• What’s NEVER sent: Your files, file contents, file metadata, browsing history, IP address (only a salted hash is used briefly for rate-limiting; the hash is not stored beyond a day)
• Anti-abuse: Cloudflare Turnstile (cookieless, no Google), per-IP-hash rate limit, honeypot field. URLs in submitted text are stripped before forwarding
• Where it goes: A private project on our self-hosted issue tracker. Not publicly searchable; only the maintainers see it
• Opt-in: The feedback buttons are entirely optional. Don’t click them and nothing is sent

That’s it. All JavaScript libraries we use (pdf-lib, pdfjs-dist, etc.) are bundled with our site at build time. We do not load code from third-party CDNs at runtime.

---

Children’s Privacy

Our service is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you are a parent and believe your child has provided us with personal data, please contact us.

---

International Data Transfers

Our website is hosted on Cloudflare Pages, which uses a global content delivery network. Your connection may be routed through edge locations near you for faster loading.

All data handling complies with GDPR, CCPA, and other applicable privacy regulations.

---

Data Security

Security through minimalism:

• HTTPS encryption for all connections
• Client-side processing — your files never leave your browser
• No database storing personal data
• No user accounts or passwords
• No payment information (everything is free)

The best security is not collecting data in the first place. That is our approach.

---

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the “Last updated” date at the top
• Posting a notice on the website for material changes

Continued use of the website after changes constitutes acceptance of the new policy.

---

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt out of the sale of your data — we do not sell data
• Right to non-discrimination for exercising your rights

We do not collect personal information that would trigger CCPA obligations.

---

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the channels listed on the About page.

---

Legal Basis for Processing (GDPR)

We process data under the following legal bases:

1. Legitimate Interest (Article 6(1)(f) GDPR) — serving website content and maintaining security
2. Contractual Necessity (Article 6(1)(b) GDPR) — providing the tools you requested

We do not collect data requiring explicit consent. If we add such features in the future, we will request consent first.

---

Open Source & Transparency

We believe in transparency. The website is built with:

• Astro — static site generator
• pdf-lib, pdfjs-dist — open-source PDF libraries
• Tailwind CSS — styling
• Pure HTML5, JavaScript, and the Canvas API for image processing

Everything runs in your browser. You can inspect the source in your browser’s developer tools.

---

Thank you for trusting Tools Planet with your PDF and image processing. Your privacy matters to us. 🌍