Privacy Policy

Last updated: April 2026

This page describes, in plain English, what data leaves your browser when you use TheToolly and who receives it. We've tried to avoid the usual privacy-policy habit of saying "your privacy is important to us" and leaving it at that. Where a tool sends data somewhere, we name where and why. Where it doesn't, we say that too.

1. Who runs this site

TheToolly is an independently operated collection of free web tools at thetoolly.com. It is not affiliated with Google, Adobe, Microsoft, or any of the open-source libraries the tools rely on. For questions, write to thetoollyy@gmail.com.

2. How most of the tools handle your files

The large majority of TheToolly's tools run as client-side JavaScript in your browser. That means when you drop a PDF, image, video, or text block into one of these tools, the file is read by code that's already been downloaded to your device — it isn't uploaded to us. Libraries doing this work include pdf-lib and pdf.js (PDF editing and rendering), ffmpeg.wasm (video and audio), tesseract.js (OCR), browser-image-compression (image compression), and the Web Crypto API (random number and password generation). We cannot see the files these tools process, and nothing about them is stored on our infrastructure.

3. Exceptions — tools that do send data to a server

Two tools are not purely in-browser, and we want to be explicit about them:

• PDF to Word — The PDF you upload is sent over HTTPS to a conversion server we operate on render.com. A Python service using the pdf2docx library converts it to a .docx file and sends that back. The file is processed in memory and discarded after the response is returned. We don't archive uploads, we don't read them, and we don't share them. But because the file does briefly transit our server, we can't claim it never leaves your device — it does, and this is the honest way to say so.
• Grammar Checker — The text you paste is sent to the public LanguageTool API (languagetool.org) for analysis. LanguageTool's own privacy policy applies to that traffic. We don't log or store your text on our side, but LanguageTool is a separate third party you're choosing to use when you run this tool.

If you'd rather not send data to either of those, simply don't use those two tools — the other 27 do not make any network requests with your content.

4. Analytics

We use Google Analytics 4 (measurement ID G-JTXMMKVHWG) to understand which tools people use and how the site performs. Google Analytics sets cookies and collects data such as your IP address (which Google truncates), approximate location derived from it, device and browser type, referring page, and the pages you visit on the site. It does not receive the contents of the files or text you process inside the tools themselves — only the fact that you loaded a given page.

You can opt out of Google Analytics across the web by installing the Google Analytics Opt-out Browser Add-on, by blocking third-party scripts with a content blocker such as uBlock Origin, or by enabling a tracker-blocking privacy browser.

5. Advertising (Google AdSense)

We run advertisements from Google AdSense. Ad slots are how this site stays free — we don't charge for anything and don't offer a paid tier. AdSense and its partner networks use cookies and similar technologies to choose which ads to show you. Depending on your preferences and region, those ads may be either personalized (based on your browsing history across other sites) or non-personalized (based only on rough context like the page topic and your approximate location).

AdSense and its partners may receive:

• Your IP address and rough geographic region
• Browser, device type, and operating system
• The URL of the page you're on
• The date and time of your visit
• For personalized ads, your activity on other sites in the Google ads network

Google's own description of how they use this data lives at policies.google.com/technologies/partner-sites.

6. How to turn off or limit personalized ads

• Open Google Ads Settings and toggle personalized ads off. This applies across every site using Google ads, not just ours.
• Visit aboutads.info (US) or youronlinechoices.eu (EU) to opt out of most third-party ad networks in one go.
• Use a content blocker (uBlock Origin, Privacy Badger) or a browser with built-in tracking protection (Firefox, Brave, Safari with prevention enabled). This is the most thorough approach and also blocks our analytics.
• Clear cookies or use your browser's private / incognito mode — this resets the identifiers ad networks use to build a profile, though it doesn't stop them from being collected in future sessions.

7. Cookies we set or that third parties set on our behalf

• Google Analytics cookies (_ga, _ga_*) — used to distinguish unique visitors and sessions. Typical lifetime: up to 2 years.
• Google AdSense cookies — set by the AdSense tag to choose and rate-limit ads, and (where personalized ads are enabled) to remember ad-related preferences.
• A simple first-party cookie-consent preference — set only if you dismiss or interact with the cookie notice, so you don't see it on every page load.

We don't sell cookie data. We don't set any cookies for the tools themselves — the tools don't need them.

8. What we never collect

• We have no sign-up, login, or user accounts of any kind.
• We don't ask for or store your name, email, or phone number anywhere on the site (the Suggest a Tool form emails us directly via your own mail client, it doesn't submit to us).
• We don't take payments — there's nothing paid — so there's no billing data to hold.
• We don't run tracking pixels or fingerprinting scripts beyond what Google Analytics and AdSense do by default, and we don't buy or sell user lists.

9. Your rights

If you are in the EU, UK, California, or another jurisdiction with strong data rights, you generally have the right to access, correct, or delete data a company holds about you. Because we don't hold accounts or files, the main data you'd want is handled by Google — their tools at the links above let you view and delete it. If you want to exercise any right in connection with something TheToolly specifically did, email us and we'll respond.

10. Children

TheToolly is a general-audience website and isn't directed at children under 13. We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll take reasonable steps to delete it.

11. Changes to this policy

If anything material changes — a new third-party service, a new tool that talks to a server, a change in what Google collects — we'll update this page and bump the "Last updated" date at the top. For minor edits (wording, clarifications) we may not. You can check this page at any time; there's no paywall on it.

12. Contact

Privacy questions, takedown requests, or corrections: thetoollyy@gmail.com.