Privacy Policy & Client-Side Architecture

01.Introduction & The Zero-Trust Paradigm

Toolsutra ("we", "our", or "the Platform") operates https://toolsutra.com. This Privacy Policy explains our practices regarding user privacy, data handling, and local client-side processing.

Our foundational design thesis is simple: the most secure data is data that is never collected in the first place. By architecting Toolsutra as a purely client-side static application (MPA), we eliminate backend databases, API servers, and processing endpoints that could otherwise store or expose your data.

02.What Information We Collect (Strictly None)

Unlike conventional web applications, Toolsutra does NOT collect:

• Input Payloads: JSON, YAML, SQL queries, CSV files, private keys, source code, text strings, and images provided to any tool are NEVER transmitted over the network.
• Personal Identifiable Information (PII): We do not require names, email addresses, usernames, passwords, or company affiliations.
• Sensitive Authentication Credentials: Any JWT tokens, API keys, or certificates inspected in our debuggers remain strictly in your browser window.
• Cross-Site Tracking Identifiers: We do not deploy advertising pixels (Meta Pixel, TikTok Pixel, Google Ads) or biometric trackers.

03.Technical Proof: How In-Browser Execution Works

You can independently verify Toolsutra's zero-collection guarantee at any time using standard browser developer tools:

All data parsing, AST generation, diff calculation, formatting, and mathematical transforms are executed by JavaScript running inside your browser's V8 or JavaScriptCore engine, occasionally offloaded to background Web Workers to keep the UI smooth.

04.Browser Local Storage & State

Toolsutra does not use cookies for tracking or session management. We only use browser localStorage for a single purpose:

• Theme Preference: Storing your preferred color scheme (toolsutra-theme: 'dark' | 'light') so that your visual setting persists across page reloads without flashing.

This storage key never contains personal identifiers and is never transmitted to any external server.

05.Global Privacy Compliance (GDPR, CCPA, CPRA, PECR)

Because Toolsutra does not process, store, sell, or share personal data, our platform achieves compliance with global privacy regulations inherently by design:

• GDPR (European Union): No personal data processing takes place on servers. No data transfer agreements or consent banners are required because no tracking cookies exist.
• CCPA / CPRA (California, USA): We do not sell or share personal information. There is no personal data to delete or opt-out from, as none is collected.
• PECR / ePrivacy Directive: The single localStorage item is strictly necessary for fulfilling user-requested UI appearance (dark/light mode).

06.Third-Party Infrastructure & Hosting

Toolsutra is hosted as static pre-rendered HTML/CSS/JS files on high-availability Content Delivery Networks (CDNs). CDN edge servers may record standard technical server logs (such as the requesting IP address and requested static asset URL) strictly for DDoS mitigation, caching, and infrastructure stability. These server logs do not and cannot contain the contents of your tool interactions, which remain exclusively on the client.

07.Children's Privacy (COPPA)

Toolsutra does not knowingly collect information from children under the age of 13. Our developer utilities are safe for users of all ages, as no personal data is collected or stored from any user.

08.Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect improvements to our architecture or regulatory updates. Any changes will be published directly on this page with an updated "Last Updated" date.

09.Privacy Inquiries & Contact

If you have questions, architectural feedback, or security inquiries regarding our privacy practices, please contact us directly through our Contact Page or via email at privacy@toolsutra.com.