> Privacy Policy

Last updated: May 21, 2026

🔒 Short version: Your files never leave your device. We do not collect, transmit, or store any files you process with our tools.

> 1. Introduction

This Privacy Policy explains how tooldev.app handles information when you visit the site or use any of its tools (image converter, HEIC→JPG, image resizer, background remover, and related format-specific landing pages). The site is operated by Vitalii Kurovskyi (dc83) from Ukraine. The policy covers what we process locally in your browser, what anonymous analytics we collect, which cookies and localStorage keys are used, and the rights you have under GDPR and CCPA. For any privacy question, write to privacy@tooldev.app. This policy was last updated on April 24, 2026.

> 2. How we process your files

Every conversion, resize, format detection, and ZIP packaging operation on tooldev.app runs entirely inside the browser sandbox on your device. When you drop a file onto the tool, the JavaScript code in src/js/converter.js reads it through the standard FileReader and File APIs, decodes the pixel data with createImageBitmap() or an offscreen HTMLImageElement, draws it onto a <canvas> element, and re-encodes it through canvas.toBlob() in the target format. Multi-file batches are packaged with the JSZip library running locally; nothing is streamed off-device. Heavy operations such as background removal use a Web Worker and an in-browser ML model that loads once and runs against your image without network calls. No copy of your file, its pixel data, EXIF metadata, ICC profile, file name, or dimensions is ever uploaded to a server, transmitted over the network, or persisted by tooldev.app. The output blob you download is generated on the same device that produced the input. If you close the tab, all in-memory data is discarded by the browser.

> 3. What we DO collect

We collect a minimal set of anonymous, aggregate analytics through Google Analytics 4 (measurement ID G-GXT10TCK06) so we can understand which tools are used and which pages need improvement. GA4 records the standard automatic events — primarily page_view with the page path and referrer — together with consent state signals from the Google Privacy & Messaging consent banner. GA4 is configured through Google's standard controls and Consent Mode v2; outside the EEA/UK/Switzerland analytics is granted by default, while in those regions it stays denied until you accept the banner. Google AdSense (publisher ID ca-pub-2897599067552095) loads on every page and may collect standard ad-impression and click metrics governed by Google's own privacy policy. We do not collect names, email addresses, account credentials, payment data, or any free-form user input — the site has no accounts, login, or comment form.

> 4. What we DO NOT collect

We do not collect, log, transmit, or persist any of the following: the file content of images you convert; the names, sizes, or modification dates of those files; their pixel dimensions, EXIF metadata, GPS coordinates, ICC color profiles, or thumbnails; the names of output files you save; the device path you saved them to; your full IP address in identifiable form (GA4 anonymizes the last octet before storage); your browser fingerprint beyond the standard User-Agent received by Cloudflare's edge servers; keystrokes, mouse movements, scroll heatmaps, or session recordings. We also do not share, sell, rent, or trade any analytics data with third parties beyond the Google services listed below.

> 5. Cookies & localStorage

tooldev.app uses a small number of cookies and localStorage entries. Each one has a clear purpose:

  • toolbox-theme (localStorage, no expiry) — remembers your selected color theme between visits.
  • toolbox-lang (localStorage, no expiry) — remembers your selected interface language.
  • _ga, _ga_GXT10TCK06 (first-party cookies on tooldev.app, 13 months) — Google Analytics 4 client-id cookies. Set whenever analytics consent is granted, which is the default outside the EEA/UK/Switzerland; in those regions they are set only after you accept the banner.
  • FCCDCF, FCNEC, __gads, __gpi, __eoi (cookies, up to 13 months) — Google Privacy & Messaging CMP and AdSense cookies. May be set by Google Privacy & Messaging or AdSense depending on your region, consent state, and Google's own policies — including cookies that record a rejection.

The localStorage values stay on your device and are never sent to any server. Google scripts may set first-party cookies on tooldev.app (such as _ga) and additional third-party cookies on Google domains; both are governed by Google's policies linked below.

> 6. Third-party services

  • Google Analytics 4 — anonymous traffic measurement. Google Privacy Policy.
  • Google AdSense — display advertising (ID ca-pub-2897599067552095). How Google uses ad data.
  • Google Privacy & Messaging CMP — Consent Mode v2 banner for EEA/UK/CA visitors.
  • Cloudflare Pages — static hosting and CDN. Cloudflare may log standard edge access entries (IP address or truncated IP, request path, user agent, timestamp), per its own product configuration. Cloudflare Privacy Policy.

> 7. Your rights

Where applicable privacy laws apply to you (for example GDPR in the EEA/UK or CCPA in California), you may have the right to access, correct, delete, restrict, or port any personal data we hold about you, and to opt out of personalized advertising. tooldev.app is operated by an individual in Ukraine and does not directly collect personal data during file processing, so most requests in practice concern analytics and advertising handled by Google. You can: reject advertising cookies in the consent banner; opt out of personalized ads at google.com/settings/ads; send a deletion or access request to privacy@tooldev.app; or use Google's own data controls for any data Google holds. We will respond to verified requests within a reasonable time and, where required by law, within the statutory deadline.

> 8. Data retention

Files you process: zero retention — discarded the moment the browser tab is closed. Google Analytics 4 user-level and event-level data: 14 months (the default GA4 retention window). Cookies: each cookie expires per the schedule listed in section 5.

> 9. Contact

Data controller: Vitalii Kurovskyi (dc83), Ukraine. For privacy questions, data-rights requests, or any other concern about how the site handles data, write to privacy@tooldev.app. Replies usually arrive within 5 business days.

> 10. Changes to this policy

We may update this Privacy Policy when new tools, third-party services, or cookies are introduced. Material changes will be announced at the top of this page and the "Last updated" date will be revised accordingly.

Last updated: May 21, 2026.