Privacy Policy
Our privacy policy and data handling practices
Last updated: January 18, 2026
Introduction
Tools Planet (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we handle your data when you use our website and client-side tools.
The Short Version
We don’t track you. All tools run entirely in your browser. Your files never leave your device. We don’t use tracking cookies and we don’t show ads.
What We Collect (Spoiler: Almost Nothing)
1. Files You Process
What happens to your files:
- All file processing happens entirely in your browser
- Files are never uploaded to our servers
- Files may be temporarily held in your browser’s memory or
sessionStoragewhile a tool runs - Files are automatically discarded when you close the tab or start a new operation
We have zero access to your files. Everything runs client-side.
2. Website Analytics
If enabled, we use Cloudflare Web Analytics — a privacy-friendly analytics product that:
- Uses no cookies
- Collects no personal data
- Does no cross-site tracking
- Reports only aggregated, anonymous statistics (page views, country-level location, browser type)
What we do not use:
- Google Analytics
- Facebook Pixel
- Tracking cookies
- Browser fingerprinting
- Cross-site tracking
3. Technical Information
Your browser automatically shares the following with any web server, including ours:
- IP address — used for routing your request, not stored long-term
- Browser type (e.g., Chrome, Firefox)
- Operating system (e.g., Windows, macOS)
- Referrer URL
This is standard web server behavior. We do not retain server logs beyond what our hosting provider (Cloudflare Pages) holds for operational purposes.
Cookies & Local Storage
Cookies: None 🎉
We do not use cookies for tracking.
Local Storage & Session Storage
We use browser storage for functionality:
| Storage | Purpose | Duration | Can be disabled? |
|---|---|---|---|
sessionStorage | Temporarily hold files between steps in a tool | Until you close the tab | No (required for tools) |
localStorage | Language preference | Persistent | Yes (site will use browser language) |
localStorage | UI hints (e.g., dismissed onboarding) | Persistent | Yes (hints will reappear) |
This storage is:
- Stored only on your device
- Never sent to our servers
- Not used for tracking
- Required for the site to function properly
Under GDPR and ePrivacy regulations, this kind of storage is classified as “strictly necessary” and does not require consent.
Your Rights (GDPR & Privacy Laws)
Even though we collect almost no personal data, you have rights:
Right to Access
Request a copy of any data we hold about you (spoiler: nothing personally identifying).
Right to Deletion
Request deletion of your data. You can do this yourself at any time by clearing your browser storage for our domain.
Right to Object
Object to data processing. Not applicable, as we don’t process personal data.
Right to Portability
Request your data in a portable format. Not applicable.
Right to Rectification
Request correction of inaccurate data. Not applicable.
To exercise your rights, contact us at the email listed below.
Third-Party Services
We rely on the following third parties:
Cloudflare Pages (Hosting)
- Purpose: Hosting the website and serving static files
- Data they handle: Standard HTTP request data (IP, browser type)
- Cookies: None served by us
- Privacy: Cloudflare Privacy Policy
Cloudflare Web Analytics (Optional)
- Purpose: Anonymous usage statistics, only enabled when configured
- Data they handle: Aggregated, anonymous traffic data
- Cookies: None
imgly CDN — AI background-removal model (Only when you use that tool)
- Purpose: Download the ~30MB machine-learning model and WebAssembly runtime that powers the “Remove Background” tool. Required to run the AI locally in your browser
- What’s sent to imgly: A standard HTTP GET request for static files (User-Agent + IP — same as any web request). No image data is ever sent. The model itself is read-only static content
- When it happens: Only on the first visit to
/tools/image/background-remove/. After that the model is cached in your browser, no further fetches - Why a CDN and not self-hosted: The model file exceeds our per-file deploy limits; hosting via imgly’s own CDN keeps the tool available without infrastructure becoming a bottleneck
- Opt-out: If you don’t visit the background-remove tool, no request to imgly is made
Cloudflare Pages Functions — Feedback relay (Optional, opt-in)
- Purpose: Forward anonymous user feedback (👍/👎 buttons on tool result pages) to our private issue tracker so we can improve the tools
- What’s sent: Only what you type in the feedback form (max 2000 characters), the tool name, your locale, and — only if you choose to fill it in — your email address for follow-up
- What’s NEVER sent: Your files, file contents, file metadata, browsing history, IP address (only a salted hash is used briefly for rate-limiting; the hash is not stored beyond a day)
- Anti-abuse: Cloudflare Turnstile (cookieless, no Google), per-IP-hash rate limit, honeypot field. URLs in submitted text are stripped before forwarding
- Where it goes: A private project on our self-hosted issue tracker. Not publicly searchable; only the maintainers see it
- Opt-in: The feedback buttons are entirely optional. Don’t click them and nothing is sent
That’s it. All JavaScript libraries we use (pdf-lib, pdfjs-dist, etc.) are bundled with our site at build time. We do not load code from third-party CDNs at runtime.
Children’s Privacy
Our service is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you are a parent and believe your child has provided us with personal data, please contact us.
International Data Transfers
Our website is hosted on Cloudflare Pages, which uses a global content delivery network. Your connection may be routed through edge locations near you for faster loading.
All data handling complies with GDPR, CCPA, and other applicable privacy regulations.
Data Security
Security through minimalism:
- HTTPS encryption for all connections
- Client-side processing — your files never leave your browser
- No database storing personal data
- No user accounts or passwords
- No payment information (everything is free)
The best security is not collecting data in the first place. That is our approach.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Updating the “Last updated” date at the top
- Posting a notice on the website for material changes
Continued use of the website after changes constitutes acceptance of the new policy.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt out of the sale of your data — we do not sell data
- Right to non-discrimination for exercising your rights
We do not collect personal information that would trigger CCPA obligations.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us through the channels listed on the About page.
Legal Basis for Processing (GDPR)
We process data under the following legal bases:
- Legitimate Interest (Article 6(1)(f) GDPR) — serving website content and maintaining security
- Contractual Necessity (Article 6(1)(b) GDPR) — providing the tools you requested
We do not collect data requiring explicit consent. If we add such features in the future, we will request consent first.
Open Source & Transparency
We believe in transparency. The website is built with:
- Astro — static site generator
- pdf-lib, pdfjs-dist — open-source PDF libraries
- Tailwind CSS — styling
- Pure HTML5, JavaScript, and the Canvas API for image processing
Everything runs in your browser. You can inspect the source in your browser’s developer tools.
Thank you for trusting Tools Planet with your PDF and image processing. Your privacy matters to us. 🌍