Privacy Policy

Your files: nothing you convert is uploaded. Every tool on this site runs locally in your browser using WebAssembly, and the site's code contains no upload endpoint for file contents to reach — so the images, video, text and archives you convert never touch a server, ours or anyone else's. Nothing about them is logged, because nothing about them ever arrives.

Analytics: this site uses Google Analytics 4 to count page views and see which tools actually get used, which is how we decide what to build next. It runs on privatetoolkit.org only — the staging and development copies of the site load nothing from Google at all. It is configured with Google Signals and ad personalisation both switched off, so what it records is not joined to an advertising profile and is not linked across your devices. Google receives the address of the page you are on, the page that referred you, an approximate location derived from your IP address, and your device and browser type. It receives nothing about the files you convert: those never leave your device, and a file name is never part of a page address. To opt out entirely, install Google's opt-out add-on at tools.google.com/dlpage/gaoptout, or use your browser's tracking protection or an ad blocker — every tool on the site works exactly the same either way. There is no cookie consent banner here; if you would rather not be counted, those opt-outs work without one.

Cookies: two, both set by Google Analytics — _ga and _ga_<measurement-id>. They hold a randomly generated number so that a second visit is counted as the same browser rather than a new person, they expire after two years, and they contain nothing you typed, converted or named. Nothing else on this site sets a cookie: there is no account, no login and no session, so there is nothing for us to keep one for.

Settings kept on your device: three preferences are stored in your browser's local storage — your theme choice (toolkit-theme), whether pasted code is formatted automatically (toolkit-autofmt), and whether a batch of results is collected into a single .zip (toolkit.autosave). These stay in your browser, are never transmitted, and clearing your browsing data removes them.

Third-party requests: two, both to Google, and both only on the live site. The analytics script is fetched from www.googletagmanager.com, and the measurements it takes are sent to google-analytics.com. That is the whole list — no external fonts, no content-delivery resources, no tracking pixels from anyone else; every other asset comes from this domain. The site's Content Security Policy names those two hosts explicitly and forbids every other destination, so this is enforced by your browser rather than promised by us. You can confirm it yourself in your browser's network tab.

Server logs: the web server keeps standard access logs — IP address, timestamp, requested URL, referrer and user-agent string — for security and traffic measurement. They record that a page was requested, never what you converted on it, because file contents never reach the server.

Error reports: when a browser blocks something this site's Content Security Policy did not permit, it posts a short report back to this site, never to a third party. Those reports record the policy directive, the blocked URL, the page URL and the browser's user-agent string. They deliberately record no IP address and no cookies.

Advertising: this site currently shows no advertising and makes no request to any ad network. If advertising is introduced, this page will be updated before it goes live. When that happens, ads will be served by a third-party network — Google AdSense is the intended one — and third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this or other websites. You can opt out of personalised Google advertising at google.com/settings/ads, and out of many other vendors at aboutads.info/choices. No advertiser will ever have access to the files you convert: those never leave your device, so there is nothing there for one to see.

Search tools: Google Search Console and Bing Webmaster Tools are used to see how this site appears in search results. They report on Google's and Microsoft's own search data, run no code on this site, and have no view into anything you do inside the tools.

Your data: there is no account to create, no personal data is collected beyond the server logs described above, and no profile of you is built. If you have a question about this policy, or want to ask what is held about requests from your address, write to info@gyrussolutions.com.

Changes: this page is updated whenever the site's data practices change. Last updated 31 August 2026.