Privacy

The one distinction that matters

Two different things happen on a page here, and it is worth separating them clearly rather than making a single sweeping claim.

• Your tool content — processed locally. Our tool code processes your text and files in your browser. We do not intentionally send tool inputs, outputs or filenames to our analytics or advertising integrations.
• Your visit — measured, like on most sites. That you opened a particular page, roughly where in the world you are, and what browser you use. The ad network sees this, and uses cookies for it.

Advertising and analytics make network requests. Third-party scripts running on a page are a trust boundary; local processing is not a technical guarantee that those scripts cannot access page content.

How the tools work

Every tool runs as JavaScript inside your browser tab, using standard web APIs — Canvas for images, the File API for reading files you choose, Web Crypto for hashing, the built-in parsers for JSON and XML, and local libraries for other formats. The tool code does not upload files or text to a processing backend.

Inspect a workflow with synthetic input using your browser's Network tab, and compare tool processing with analytics and ad requests. Test the tools you need offline before relying on cached resources. These checks do not guarantee the behavior of future code, browser extensions or third-party scripts. Avoid live credentials and sensitive records.

What is stored on your device

Four small values are kept in your browser's local storage so the site remembers your preferences between visits:

• qt.theme — whether you chose light, dark or system appearance.
• qt.favorites — the list of tools you saved.
• qt.recent — the last few tools you opened.
• qt.background-motion — your animation pause preference.

These stay in your browser and are never transmitted. Clearing your site data removes them permanently, and every tool works exactly the same without them.

Advertising

This site is free; individual tools may apply safety limits. Google AdSense is configured on tool pages. Display depends on provider approval and visitor settings. Search, category, saved-list, error and informational pages do not load the ad script.

To be specific about what that involves:

• Google, as a third-party vendor, uses cookies to serve ads on this site. The DoubleClick DART cookie enables Google and its partners to serve ads based on your visit to this and other sites on the internet.
• Third-party vendors and ad networks may also use cookies, web beacons or similar technologies to measure ad performance and limit how often you see the same ad.
• These cookies may be used to show you personalised ads. Where required by law, you are asked for consent before that happens, and you can decline and still use every tool on the site.
• Ad creatives may use isolated frames, but their loader scripts run on the page. We do not pass tool content to those integrations.

You can opt out of personalised advertising by Google at Google Ads Settings, and opt out of many other vendors at aboutads.info or the NAI opt-out page. Blocking ads with an extension also works, and nothing on the site breaks if you do — there is no wall, no nag and no reduced functionality.

Google's own explanation of how it uses data from sites that use its services is at policies.google.com/technologies/partner-sites.

If you would rather not see ads at all, blocking them is fine by us — and if you want to support the site directly instead, you can buy me a coffee.

Analytics

Two measurement tools run on this site, and they differ in what they do:

• Cloudflare Web Analytics — cookieless. It records page views and referrers in aggregate and does not identify you or follow you across sites.
• Google Analytics 4 — sets first-party cookies (named _ga and _ga_*) to recognise a returning browser and measure which pages and tools get used. File downloads and form interactions are switched off, so those events are not collected.

Our analytics events measure visits and tool completion using only the tool identifier, not tool inputs, outputs or filenames. This describes our integration, not a browser-enforced restriction on third-party scripts. Clearing your site data removes the analytics cookies, and blocking either script leaves every tool working exactly as before.

Other third-party requests

• Cloudflare serves every page as our host and, as with any web host, processes the network request itself.

Tools whose required resources are cached can work without a connection. Downloads may be incomplete and browsers may clear stored resources. Offline operation is not a guarantee that no requests will be attempted or that nothing is sent when you reconnect.

Children

The site is not directed at children under 13 and we do not knowingly collect any personal information from them.

Where you are changes what happens

Our Google Consent Mode configuration uses regional defaults. These describe the signals our integration sends; they do not mean that the page makes no network requests.

• EEA, UK and Switzerland — opt in. Advertising and analytics storage start denied in Consent Mode. Google may still receive cookieless requests. Essential preferences such as your theme are separate. Tool processing does not require advertising consent.
• United States. The configured default is granted, subject to applicable consent choices and the advertising opt-out signal described below.
• Other regions. The current configuration also defaults to granted. Contact our privacy address if you have questions about processing in your region.

Global Privacy Control

If your browser or an extension sends Global Privacy Control, this site sends denied values for ad_storage, ad_user_data and ad_personalization through our Consent Mode integration. This signal does not change analytics_storage in our implementation; analytics follows its separate regional consent settings and is not necessarily cookieless.

Changing your mind

Ad-free pages do not load Google's ad messaging script. You can open advertising privacy choices on a tool page. When Google's consent control is available, the dialog opens there automatically. If it does not appear, use the provider opt-out links above or contact our privacy address. Clearing this site's browser data removes its local preferences and first-party cookies; third-party cookies and provider-held records may need separate controls.

Your rights

We do not operate user accounts or a tool-input database. For access, deletion or other privacy requests concerning this site, contact privacy@ondevice-tools.org. Analytics and hosting providers may hold visit records; their policies and controls are linked above. Browser cleanup is not a provider deletion request. Clearing your browser's site data removes locally stored site data, but not provider-held records or all third-party cookies.

Changes to this page

If what the site does changes, this page changes with it, and the date at the top is updated. It is meant to describe reality rather than to cover us; if you find a statement here that is not accurate, please report it.

Contact

Questions, corrections or data-protection requests about this page: privacy@ondevice-tools.org. More on how the site is built and funded is on the about page.