Zero-Server Privacy Guarantee

Privacy Policy

Effective Date: April 1, 2026 · Last Updated: October 2026

The ToolFlow Zero-Server Architecture

Files never leave your local browser sandbox

At ToolFlow (https://toolflow.tech), we operate on a fundamental principle: your private documents, images, and text belong solely to you.

Unlike conventional online tool portals that upload your sensitive files to remote cloud storage (AWS, Google Cloud, or third-party servers), ToolFlow performs 100% of document processing, image compression, resizing, and text transformation locally in your web browser.

✓ Local Memory ExecutionFiles are read via JavaScript File and Blob APIs directly into your device RAM.
✓ WebAssembly ProcessingPDF and image algorithms run via compiled WebAssembly binaries on your local CPU.
✓ Zero Server IngestionWe maintain no backend servers that receive, save, or process your file content.
✓ Zero Retention TimeWhen you close your browser tab, all processed file data is purged from memory.

1. Information We Collect

Because ToolFlow does not require registration, accounts, or payments, we collect minimal operational information:

  • No Personal Identifiable Information (PII) for Tool Usage: We do not ask for your name, email address, physical address, or phone number to use any of our tools.
  • Local Storage Preferences: We use your browser's localStorage solely to remember your UI theme preference (Light or Dark mode) and your cookie consent choice. This data is never transmitted to us.
  • Cookie Consent State: We store your cookie consent decision (toolflow_cookie_consent) in your browser's localStorage so we do not ask repeatedly.
  • Direct Communication Records: If you voluntarily contact us at support@toolflow.tech, we retain your email and correspondence strictly to respond to your inquiry.

2. Cookie Consent & Your Control

When you first visit ToolFlow, a cookie consent banner is displayed. You can choose to:

  • Accept All Cookies: Enables analytics and advertising cookies that support the free operation of this platform.
  • Decline Non-Essential: Only essential cookies (theme preference) are stored. Analytics and advertising scripts are blocked.
  • Customize: Independently toggle Analytics and Advertising cookies.

We use Google Consent Mode v2— analytics and advertising scripts default to "denied" state and only activate after you explicitly grant permission. You can change your preferences at any time by clearing your browser's localStorage for toolflow.tech.

Essential Cookies (Always Active): These are required for basic site functionality (dark/light theme preference) and cannot be disabled. They contain no personal data.

3. Google AdSense & DoubleClick DART Cookies

ToolFlow uses Google AdSense to display advertisements that support free access to all tools and fund ongoing development. AdSense is only activated after you provide cookie consent.

Third-Party Vendor Cookies:Google and other third-party vendors use cookies to serve ads based on a user's prior visits to this website or other websites on the internet.

DoubleClick DART Cookie:Google's use of advertising cookies enables it and its partners to serve ads based on your visit to ToolFlow and/or other sites on the Internet.

Opt-Out Mechanisms: Users may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, opt out via www.aboutads.info/choices.

4. Web Analytics & Telemetry

We use Google Analytics (only after consent is granted) to monitor aggregate traffic patterns, diagnose broken routes, and evaluate page load performance.

  • IP anonymization is enabled — your complete IP address is never stored.
  • Analytics tracks only aggregate metadata (device type, browser family, referring domain, page views).
  • Analytics scripts have zero access to file contents processed in the browser.
  • You can block analytics tracking entirely using browser privacy extensions, or by declining cookies in our banner.

5. International Privacy Rights (GDPR & CCPA/CPRA)

European Economic Area (GDPR): Under the General Data Protection Regulation, European residents have the right to access, rectify, or erase any personal data held by us. Because our core utilities run client-side without storing files or creating user profiles, we hold zero user dossiers. Analytics and advertising require explicit opt-in consent under GDPR Article 6(1)(a).

California Residents (CCPA/CPRA):Under the California Consumer Privacy Act, California residents have the right to know what personal information is collected and to opt out of the "sale" or "sharing" of personal information. ToolFlow does not sell personal user information. You may opt out of behavioral advertising using the cookie consent banner.

6. Open-Source Libraries & Code Execution

ToolFlow utilizes audited, industry-standard open-source JavaScript and WebAssembly packages including pdf-lib, browser-image-compression, and native Web APIs. These libraries are bundled securely into our static client bundles and execute strictly in the client runtime without making independent background network connections.

7. Changes to This Policy

We reserve the right to revise this Privacy Policy periodically to reflect technological developments, AdSense policy updates, or regulatory adjustments. Revisions will be published directly on this page with an updated "Last Updated" timestamp. Continued use of ToolFlow after changes are posted constitutes acceptance of the revised policy.

8. Contact Us — Privacy Questions

If you have questions regarding this Privacy Policy, your privacy rights, cookie preferences, or advertising practices, please contact us:

ToolFlow Privacy & ComplianceEmail: support@toolflow.tech