Privacy policy

Every image, video, audio file, subtitle file, PDF or document you open in Toolvy — and any text you paste — is processed entirely inside your browser, on your own device. It is never transmitted to us or to anyone else. We do not have a server that receives files, so there is nothing for us to store, retain, inspect, sell or train a model on.

A few tools need an AI model to run on your device: speech-to-text and the AI text detector download theirs from Hugging Face’s content delivery network the first time you use them, and your browser caches it. Hugging Face sees an ordinary download request — your IP address and browser, as with any website — but never your file or your text. The other AI models (background removal, watermark removal, the image detector) are served from this site.

You do not have to take our word for it. Open your browser’s developer tools, switch to the Network tab, and compress an image. You will see no request carrying your file. Alternatively, load the site once, disconnect from the internet, and keep using it — the tools continue to work, because they were never talking to a server.

We count page views so we know which tools are worth improving. This uses no cookies and no browser storage of any kind. For each page view we record: the path you visited, the hostname of the site that linked you here (never the full URL), your country as reported by our CDN, and your screen width.

To count unique visitors without identifying anyone, we compute a hash of your IP address, your browser’s user-agent string, a secret key, and today’s date. We store only that hash. Your IP address is never written to disk. Because the current date is part of the hash, the same person visiting on two different days produces two unrelated values. Our database is structurally incapable of following you from one day to the next, let alone across other websites.

If your browser sends a Do Not Track or Global Privacy Control signal, we do not record the page view at all.

Toolvy is free because it shows advertisements supplied by Google AdSense. Running the site costs us very little precisely because no server touches your files, and ads cover the rest.

Google is a third party and may set cookies to personalise the ads you see, and to measure them. If you consent, it does. If you decline, you will still see ads, but non-personalised ones. You can change your mind at any time by clearing this site’s cookies, which will bring the consent banner back.

Google’s use of advertising cookies is governed by its own policies. You can review and control them at myadcenter.google.com and read about how Google uses data at policies.google.com/technologies/partner-sites.

Advertisements never see your files. Ad code runs in a sandboxed cross-origin iframe and has no access to the files you open or to the canvas we render them on.

Exactly one, and only after you interact with the consent banner:

Your theme preference (light or dark) is kept in your browser’s local storage. It is never sent anywhere.

Under the GDPR and similar laws you may request access to, correction of, or erasure of your personal data. In our case this is close to moot: we hold no images, no IP addresses, no email addresses and no accounts. The daily-rotating hashes we do hold cannot be linked back to you by us or by anyone else without your IP address, your exact user-agent string, and our secret key.

If you have a question, write to contact@toolvy.net.