Privacy policy

What happens to your files

Every tool on this site runs inside your browser. When you choose a PDF or a photo, it is read into your browser's memory and processed there by JavaScript and WebAssembly that has already been downloaded to your device. The file is never sent to us, because there is no server to send it to — the site is a set of static files.

When you close the tab, the file is gone. We cannot recover it, produce it in response to a legal request, or lose it in a breach, because we never had it.

You can verify this yourself: open your browser's developer tools, go to the Network tab, and run any tool. You will see no upload.

The Telegram bot is the exception

Our Telegram bot, @toolkavebot, cannot work the same way. A file you send it goes to Telegram's servers first, and our code then downloads it to convert it. That is how every Telegram bot works.

While converting, the file is held in memory only. It is never written to a disk, a database or a storage bucket, and it is discarded the moment the PDF is sent back. We keep only the Telegram identifiers needed to count the files in your current batch, and those are deleted when the batch finishes or after a day of inactivity.

Anything you send through Telegram is also covered by Telegram's own privacy policy.

What we measure

We use Cloudflare Web Analytics to see which pages are visited. It sets no cookies, does not fingerprint your browser, and does not build a profile of you. It records aggregate figures: page views, country, referring site, and how quickly pages load.

Like every website, our host also keeps short-lived request logs — IP address, browser, and URL requested — which Cloudflare uses to serve the site and to block abuse.

Cookies and local storage

We set no cookies.

One tool stores something on your device: the currency converter saves the day's exchange rates in your browser's local storage so it does not have to fetch them again. That data stays on your machine and contains nothing about you. Clearing your browser data removes it.

Other services

The site is hosted by Cloudflare, which serves the pages and provides the analytics described above.

Fonts are served from this domain rather than a font network, so loading a page contacts nobody else.

Two tools reach outside on purpose: the currency converter fetches rates from the Central Bank of Uzbekistan (cbu.uz) and open.er-api.com, and the YouTube thumbnail tool loads images from YouTube. Those requests carry the video ID or currency you asked about, nothing more.

Advertising

The site currently shows no ads and contains no advertising or tracking scripts. If that changes, this page will be updated before any ad code goes live, and it will say plainly what the ad network can see.

Your rights, and children

We hold no personal data about you, so there is nothing to export, correct or delete. If you believe otherwise, write to us and we will look into it.

The site is not directed at children and collects nothing from anyone.

Changes and contact

If this policy changes, the date at the top changes with it.

Questions about privacy: hello@toolkave.com