Security & Privacy
97% of our 69+ tools run entirely in your browser — zero uploads, zero server contact. Specialized AI tools use our server only when neural network inference is selected, processing files in ephemeral RAM and deleting them immediately.
1. No Data Sent to Servers (Client-Side Tools)
When you format JSON, parse cURL tokens, verify HMAC signatures, or merge PDFs — no data is sent anywhere. Your input is processed entirely inside your browser's JavaScript engine. Nothing leaves your device.
2. Web Crypto API for Security Operations
Cryptographic operations (SHA-256, HMAC, UUID, password entropy) use the browser's built-in window.crypto API — the same API used by your browser for HTTPS. No third-party crypto libraries with unknown vulnerabilities.
3. Data Cleared on Tab Close
All file buffers and canvas contexts live only in your browser's memory. When you close or refresh the tab, the browser clears them automatically. We have no way to access data after you leave.
4. Server Cloud AI Tools — What Happens to Your Files
A small number of specialized tools (such as AI Background Remover and Image to Text (OCR)) require server-side AI neural networks and do send your file to our API. Here's exactly what happens:
- ✓ File is sent over an encrypted HTTPS connection
- ✓ Processed immediately in server memory (RAM)
- ✓ Result is returned and file is deleted from memory
- ✕ Files are never written to disk or stored in any database
- ✕ No logs of file content are kept
These tools are clearly labeled "Server Cloud Processing" in the tool UI.