Privacy policy

Files you open in a ToolZool tool are decoded, processed and re-encoded entirely inside your browser. They are not transmitted to us or to any third party, are not stored on a server, and are discarded from memory when you close or reload the page.

This is a property of how the site is built, not a promise we ask you to take on trust. The compression code is WebAssembly delivered to your browser and run in a worker on your own device; you can watch the network panel of your browser’s developer tools during a compression and see that no request carries your image.

We keep a short list of tools you have opened, and your last-used settings, in local storage under the key toolzool:recents. It never contains file contents or file names. You can clear it from the Recent page, or by clearing site data in your browser.

Local storage stays on your device. It is not synchronised to us, and we have no way to read it.

ToolZool uses two analytics providers — Google Analytics 4 and Microsoft Clarity — to count visits and see which pages and tools are used, only if you allow it in the consent banner. Until you answer, and whenever you decline, neither script is loaded at all: no request goes to Google or to Microsoft and no analytics cookie is set.

If you allow it, Google Analytics sets two first-party cookies holding a random identifier (listed in the cookie policy), and your browser sends Google the pages you view, the page that referred you, your device and browser type, and an approximate location derived from your IP address. Google Analytics 4 does not log or store IP addresses. Google processes this data on our behalf under its data processing terms, and may process it in the United States under the EU–US Data Privacy Framework.

Microsoft Clarity does something Google Analytics does not: it records the session. It plays back where you moved, clicked and scrolled, and builds heatmaps from it. Clarity sets two cookies on this domain and five on Microsoft’s, listed in the cookie policy.

Because of that, the workspace of every tool is marked so that Clarity never uploads it. Clarity’s own masking hides what is typed into a field but not ordinary text on the page — and on this site ordinary text on the page is the answer: the password that was generated, the token that was decoded, the file that was converted. Marking the workspace means a recording shows that you used a tool, not what you used it on.

What you type into a tool and the files you open are never part of either provider’s data; they do not leave your device. You can change your answer at any time from Cookie settings at the foot of every page. Declining after allowing deletes the analytics cookies and reloads the page without the scripts.

ToolZool currently serves no advertising and sets no cookies of its own. The advertising slots you can see on tool and category pages are reserved layout space, not live ad units, so nothing is being requested from an ad network.

One qualification, because it would be misleading to leave it out. If you allow analytics, Microsoft Clarity causes Microsoft to set MUID, an identifier Microsoft also uses for advertising in its own products. This site does not read it and no advertiser pays for it; it comes with Clarity because Clarity is a Microsoft product. Decline analytics and it is never set.

When advertising does go live, this section will name the network, the placements will stay below the tool area exactly as described on the advertise page, and consent will be collected where the law requires it. Declining will not change how the tools work, because the tools never needed a network connection in the first place.

ToolZool currently takes no payments. The coffee page describes tiers that are not yet purchasable, so no payment processor is involved and no transaction data exists.

When payments go live they will be handled by an external processor; we would receive a confirmation and, if you provide it, your name and message. Card details would never reach us or this site.

The form on the contact page is not yet connected to an inbox, and the page says so. Nothing you type into it is transmitted or stored anywhere — it does not leave your browser. When it is connected, this section will say where the messages go and how long they are kept.

The site is static and served from Cloudflare Pages. Delivering any web page requires your browser to make a request, and Cloudflare processes the ordinary details of that request — IP address, time, the URL, and your browser’s user-agent string — as part of serving and protecting the site. That happens for every website you visit; it is the minimum needed to send bytes back to you. We do not add anything to it, and we do not use those logs to build a profile.

Where the GDPR or comparable law applies, you may request access to, correction of, or deletion of any personal data we hold, and you may withdraw analytics consent at any time. The tools require no account and take no payments, and analytics runs only under a random identifier for visitors who allow it, so in practice we hold nothing that identifies you by name. There is no profile to export and no account to delete.

ToolZool is a product of Adoreka.com, which operates this site and decides how the data described here is used. Its registered address and a data-protection contact will be published in this section before advertising, payments or any account system goes live.

Material changes will be announced on this page with a revised date, and where the change affects how data is handled, on the homepage for a period afterwards.