Privacy Policy

• No account is required for any tool, so we hold no user profiles.
• Files and text you process are handled in your browser and are never transmitted to our servers.
• Only three small values live in your browser's storage: your theme, your recently used tools and your analytics choice.
• Analytics are opt-in. Nothing is measured until you accept in the banner, and what is measured is aggregate page usage — never file contents.
• We do not sell, rent or share personal data, because we do not collect any beyond the above.

Everything below expands on those five points. If any part of it reads as though it contradicts the summary, the summary is the accurate one and we would like to hear about the discrepancy at legal@collabstool.com.

All 250 tools in the current library run entirely inside your web browser. When you convert an image, merge a PDF, format some JSON or generate a password, the work is done by JavaScript executing on your device using standard browser capabilities — the Canvas and Image APIs, the Web Crypto API, the Intl object, and open-source libraries such as pdf-lib and PDF.js that are bundled into the page and also run locally.

There is no upload endpoint for these tools, so there is nothing for us to receive. Your file is read from disk into your browser’s memory, transformed there, and offered back to you as a download created from a local object URL. That URL is revoked when you leave the page. You can verify this yourself: open your browser’s developer tools, switch to the Network panel, use any tool, and you will see no request carrying your file.

Each tool page states its processing mode explicitly, directly beneath the tool itself. If a tool is ever added that genuinely requires a server — because a conversion is too large or too specialised for a browser — that page will say so in the same place, before you upload anything, and this policy will be updated to describe exactly what happens to the data.

Because no account exists and no file is transmitted, we hold no user profiles, no documents, no images, no pasted text and no generated secrets. Specifically, we do not collect:

• The contents of any file you process, in any format.
• Text you paste into any tool, including passwords, keys or personal documents.
• Your name, email address or any other identifier — there is no form that asks.
• Your precise location. Where analytics are enabled by your consent, an approximate region is derived from your connection by our measurement provider; we are not given an IP address or an IP-to-person mapping.
• Cross-site tracking data, advertising identifiers or fingerprinting signals. Analytics advertising storage is held permanently denied here, whatever else you choose.

The site writes a small number of values to your browser’s localStorage. These stay on your device, are never sent to us, and can be deleted at any time — see the Cookie Policy for how.

We measure aggregate usage so we know which tools to improve and which to build next. The provider is Google Analytics 4, and what it records is page-level: which pages and tool pages were opened, in what order, from which referrer, at roughly what region and on what class of device. File contents, pasted text and output are never included, because none of them reach a server in the first place.

Measurement is opt-in. The tag is loaded in Google’s Consent Mode with storage denied by default, so no analytics cookie is set and no returning-visitor identifier is persisted unless you accept in the banner. Declining, ignoring the banner or clearing your site data all return you to the denied state, and the choice can be reversed at any time on the Cookie Policy page.

Advertising storage, advertising user data and personalisation are held denied unconditionally, so accepting analytics enables measurement only. The data is not sold, not shared with data brokers and not used for advertising targeting.

The site may show display advertising on high-traffic pages. Where an advertising partner is used, that partner may set its own cookies and is governed by its own privacy policy, not this one. We do not share any data about you with advertising partners, because we do not have any to share. Advertisers receive the same aggregate traffic statistics any website owner sees, and nothing tied to an individual.

Advertisements are never placed inside a tool’s input or output area, never disguised as a result, and never gated in front of a download.

Tools enforce a maximum input size of 25 MB by default and 100 MB absolutely, with up to 20 files in a batch. Each tool page states the limit that applies to it. These exist because processing happens in your browser’s memory, and exceeding it would make the tab unresponsive rather than because we are metering your usage.

This site is not directed at children under 13, and we do not knowingly collect personal information from anyone. Since no personal information is collected from any visitor of any age, there is no child-specific data to delete — but if you believe a child has sent us something by email, write to legal@collabstool.com and it will be removed.

Some tools produce output containing links, and some pages link to external sites we think are useful. We have no control over those sites and no responsibility for their content or their privacy practices. External links open with rel="noopener noreferrer nofollow" so the destination cannot manipulate this tab.

There is nothing to retain. Files and text exist only in your browser’s memory for the duration of the page. Analytics data is held by our measurement provider under the retention setting on our property and reaches us only as aggregate reports that are not attributable to a named individual. Email you send us is kept for as long as it takes to resolve the matter and then archived or deleted.

Depending on where you live — including under the GDPR in the United Kingdom and European Union, and the CCPA and CPRA in California — you may have rights of access, rectification, erasure, restriction, portability and objection. Because we hold no personal data about you beyond aggregate analytics and any email you choose to send, there is usually nothing to exercise those rights against.

If you would nonetheless like to make a request, write to legal@collabstool.com. We will respond within 30 days and will not ask you to prove your identity beyond what is reasonable, since there is no profile to protect.

The strongest security guarantee this site can make is architectural: your data is not here, so it cannot be breached here. Beyond that, the site is served over HTTPS with HSTS, dependencies are audited and pinned, and no third-party script is given access to tool input or output. The one third-party script on the site, Google Analytics, is given a page address and nothing else — never a file, never the text in a tool’s input box.

One thing worth saying plainly, because it is a real risk with tools of this kind: generated passwords and other secrets are displayed on your screen and may be copied to your clipboard. If someone else can see your screen or read your clipboard history, they can see them too. That is a property of your device, not of this site, but it is worth knowing.

This policy was revised on 20 September 2026 to describe Google Analytics 4 and the consent banner that controls it. Earlier versions stated that no cookies were used for measurement; that is no longer the whole truth, so the wording above is explicit about what happens before and after you choose.

If this policy changes in a way that affects what happens to your data — most likely because a server-processed tool is introduced — the change will be noted at the top of this page with a revised date before it takes effect, and the affected tool page will say so in its privacy note.

Questions about this policy, or about anything this site does with data, should go to legal@collabstool.com. General enquiries are answered at the contact page.

Collabs Tool · collabstool.com