Privacy

There are no accounts here and nothing to sign up for. We do not ask for your name, your email or anything else, and we do not build a profile of you.

Where your file or your text actually goes depends on the tool, so every tool page says so on the page itself, next to the title. That badge is the authoritative answer for that tool; the rest of this page explains what each badge means.

The tool runs entirely inside the page. When you pick an image, the browser reads it from your disk into the page’s own memory and draws it onto a canvas; resizing, cropping, compressing, converting and background changes all happen there, and the result is assembled into a download locally. Nothing is transmitted, so there is nothing for us to store, read or lose. Closing or reloading the tab discards all of it.

The same holds for text you paste. Hashes are computed with the browser’s built-in crypto API and JWTs are decoded in the page, so a token you paste in is never sent anywhere.

Some things genuinely cannot be done on a device alone. A tool that works this way is marked Server on its own page, and using it sends something to us. Whatever a server tool receives is used only to produce the result you asked for — never to train anything, and never passed to a third party for their own purposes.

There is currently one, and it is the only tool on this site that sends anything anywhere: Online clipboard.

The tool has to keep your note somewhere between you creating the link and someone opening it, so this is the one place on the site where your own content sits on our server. What it does not do is let us read it.

Your text is encrypted inside the page with AES-256-GCM before anything is sent. The key is generated in your browser and placed after the # in the link, and browsers never transmit that part of an address — not to us, not through proxies, not into access logs. What we receive and store is the ciphertext, the random nonce it needs, and three flags: how long to keep it, whether to delete it on first read, and whether a passphrase is required. If you set a passphrase, it is mixed into the key in your browser and never leaves it.

The note is held in memory in a Redis instance with an expiry attached, so it is removed when the timer runs out whether or not anyone opened it. Burn-after-reading notes are deleted in the same operation that reads them, so a second reader gets nothing. There are no backups and no archive: once a note is gone, it is gone for us as much as for you, and neither a support request nor a court order can produce the plaintext.

No account, email or name is attached to a note. Ordinary request logs still record the IP address that created or opened one, as they do for any page, and a short-lived counter keyed to your IP address enforces the rate limits that keep the tool from being used in bulk.

The pages themselves are static files delivered by a hosting provider. Like any web host, it records ordinary request logs — IP address, browser user-agent, the URL requested and the time — which are used to keep the site running and to deal with abuse. Those logs never contain the contents of a file or anything you typed into a Browser tool, because none of that leaves your device.

Web fonts are served from this site’s own domain rather than from a third party, so loading a page does not announce your visit to anyone else.

This site sets no cookies, uses no analytics or tracking scripts, and shows no ads. There is no cookie banner because there is nothing to consent to.

If that changes, this page will be updated before the change goes live and the date at the top will move.

Questions about any of this, or a request about data you believe we hold: [email protected]. See also the terms of use.