Security & Privacy
81 out of 86 tools run entirely in your browser — zero uploads, zero server contact. The remaining 5 tools use our server only for operations that require native libraries (image processing, OCR). Files are processed and deleted immediately.
1. No Data Sent to Servers (Client-Side Tools)
When you format JSON, parse cURL tokens, verify HMAC signatures, or merge PDFs — no data is sent anywhere. Your input is processed entirely inside your browser's JavaScript engine. Nothing leaves your device.
2. Web Crypto API for Security Operations
Cryptographic operations (SHA-256, HMAC, UUID, password entropy) use the browser's built-in window.crypto API — the same API used by your browser for HTTPS. No third-party crypto libraries with unknown vulnerabilities.
3. Data Cleared on Tab Close
All file buffers and canvas contexts live only in your browser's memory. When you close or refresh the tab, the browser clears them automatically. We have no way to access data after you leave.
4. Server Cloud AI Tools — What Happens to Your Files
A small number of specialized tools (such as AI Background Remover and Image to Text (OCR)) require server-side AI neural networks and do send your file to our API. Here's exactly what happens:
- ✓ File is sent over an encrypted HTTPS connection
- ✓ Processed immediately in server memory (RAM)
- ✓ Result is returned and file is deleted from memory
- ✕ Files are never written to disk or stored in any database
- ✕ No logs of file content are kept
These tools are clearly labeled "Server Cloud Processing" in the tool UI.