Privacy Policy

Effective date: 2026-05-04
Last updated: 2026-06-10

This Privacy Policy explains how toolcroft.com ("Toolcroft", "we", "our", or "us") handles information when you use our website and tools.

The short version

• Tool data stays on your device. Every calculator, converter, generator, and file utility on this site runs entirely in your browser. The numbers, text, files, and other inputs you enter into our tools are never uploaded to our servers or any third party. We physically cannot see them.
• We use Google AdSense to show ads. AdSense uses cookies (with your consent where required) and may collect information about your browser and ad interactions. AdSense is operated by Google and has its own privacy practices.
• We use our own analytics service to count anonymous page views. It does not use cookies, does not collect personal information, and runs on infrastructure we own and operate — your data is never shared with any third party. You can clear your analytics data and opt out at any time using the link in the site footer.
• You are in control. Where required by law (EU, UK, California, Brazil), we ask for your consent before personalised ads load. You can change your choice at any time.

The rest of this page covers the same in detail.

What is and isn't collected

Tool inputs (never collected, never uploaded)

When you use any tool on this site (for example, a password generator, BMI calculator, image compressor, or PDF merger), the inputs you provide (text you type, numbers you enter, files you select) are processed entirely in your browser using JavaScript that we ship to your device with the page.

We do not receive these inputs. They are not transmitted to our servers because we have no servers that handle tool data. We do not log them, store them, share them, sell them, or use them for advertising or training.

This is a hard technical guarantee. Our continuous-integration tests verify, on every change to the site, that no tool makes any network request when used. Our source code is available for audit (see Auditability below).

Web traffic information (collected anonymously)

Like nearly every website, when your browser requests a page from us, our hosting provider (Amazon Web Services / CloudFront) automatically receives standard request information such as your IP address, the URL you requested, the type of browser you're using, and the page that referred you. This is unavoidable for any website to function. We do not use this information to identify you.

We use SquidWhipped Analytics, an analytics service we own and operate on our own infrastructure, to count anonymous page views across the site. It does not use cookies, does not fingerprint your browser, and does not collect personal information that identifies you. Each page view records the following non-personal data points:

• The page path visited (e.g. /bmi-calculator/)
• The referring domain (e.g. google.com — not the full URL or search query)
• Browser family (e.g. Chrome, Firefox, Safari)
• Operating system (e.g. Windows, macOS, iOS, Android)
• Device type (mobile, tablet, or desktop — derived from viewport width)
• Language and timezone settings
• Timestamp

A random session identifier is stored in your browser's localStorage (key: sw_sid) to group page views within a visit. It is not linked to any personal information. Because SquidWhipped Analytics runs on our own servers, this data is never sold, shared with, or accessible to any third party.

You can delete your analytics data and opt out of future collection at any time by clicking Clear Analytics Data in the site footer. This removes the session identifier from your browser and sends a deletion request to our analytics server.

Advertising (Google AdSense)

We display ads on our pages provided by Google AdSense. AdSense uses cookies and similar technologies to serve ads, including personalised ads where you have given consent. Google may collect information about your visit including your IP address, the pages you view, and your interactions with ads.

In jurisdictions that require consent for personalised advertising (such as the European Economic Area, the United Kingdom, California, and Brazil), we use Google's consent management platform (Funding Choices) to ask for and record your consent. If you decline, we still show ads, but they are non-personalised (contextual only).

You can review and adjust your AdSense ad preferences at any time at adssettings.google.com.

Spam protection (Google reCAPTCHA v3)

The contact form uses Google reCAPTCHA v3 to distinguish human users from automated spam submissions. reCAPTCHA v3 runs invisibly — there is no checkbox or challenge to complete. Google's service analyses behavioural signals (mouse movement, browsing patterns, and browser characteristics) to assign a score indicating the likelihood the submission is from a human. The score is used server-side to decide whether to accept or reject the form submission.

reCAPTCHA v3 is only loaded on the contact page; it does not run on any tool page. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

Local storage (stored only on your device)

Some tools save preferences locally on your device using your browser's localStorage or sessionStorage. Examples include your dark-mode preference, a tool's last-used unit system, or recent inputs for tools where that's convenient. This data is stored only on your device. We never see it. You can clear it any time using your browser's settings.

We also store your favorited tools (toolcroft:favorites:v1) and recently-visited tools (toolcroft:recents:v1) in localStorage so we can show a personalized "Your tools" list; this data never leaves your browser.

When you explicitly pick a microphone or camera in a media tool, we store that choice in localStorage as toolcroft:media-device:audioinput:v1 (chosen microphone identifier and label) or toolcroft:media-device:videoinput:v1 (chosen camera identifier and label) so the same device is preferred across tools; this data never leaves your browser.

SquidWhipped Analytics also stores two keys in localStorage:

• sw_analytics_consent — records whether you have accepted or declined analytics collection.
• sw_sid — a randomly generated session UUID used to group page views within a visit. It contains no personal information and is not used to track you across sites.

Both keys are removed when you click Clear Analytics Data in the site footer.

Cookies

The only cookies that may be set on your device are those set by Google AdSense (for ad serving and consent recording). We do not set first-party cookies for tracking, analytics, or login (the site has no login). SquidWhipped Analytics does not use cookies; it uses localStorage only (see above).

Google AdSense may set cookies including __gads, __gpi, and _gcl_au for ad delivery and measurement. For a full list and description of cookies used by Google advertising services, see Google's Cookie Policy.

Auditability

Our claim that tool inputs never leave your browser is technical and verifiable.

• Continuous-integration tests run on every change to the site. They open every tool, exercise its functionality with sample inputs, and verify that no network request is made except to whitelisted destinations. A test failure blocks the change from being deployed.
• Source code for the site can be inspected. You can audit the JavaScript that runs in your browser by viewing the page source or using developer tools.
• Network activity can be inspected directly. Open your browser's developer tools, switch to the Network tab, use any tool, and observe what is and isn't sent.

Children's privacy

This site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us at contact@toolcroft.com and we will take appropriate action.

Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of the page. Material changes will be highlighted on the homepage for at least 30 days.

Your rights

Depending on your location, you may have rights regarding your personal information including access, correction, deletion, and opting out of personalised advertising. Because we do not collect personal information through our tools, most of these rights apply only to the limited information collected by Google AdSense or SquidWhipped Analytics.

For requests we can fulfil, contact us at contact@toolcroft.com.

EU/UK residents (GDPR)

You have the rights of access, rectification, erasure, restriction, portability, and objection. The lawful bases under which we process information are legitimate interest (operating the site and serving non-personalised ads) and consent (personalised ads, where applicable).

California residents (CCPA / CPRA) — Do Not Sell or Share

You have the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. The "share" provision applies to advertising; you can opt out by declining personalised ads through the consent banner.

To exercise your opt-out right, use one of the options below:

• Manage ad preferences on this site — Click the button below to open our ad preference manager (powered by Google Funding Choices). You can withdraw consent for personalised ads at any time; non-personalised (contextual) ads will continue to be shown.
  Manage Ad Preferences
• Google Ad Settings — Visit adssettings.google.com to manage your ad personalisation preferences across all Google services.

Contact

For privacy-related questions or requests, email us at contact@toolcroft.com.