Home/Privacy

Privacy Policy

Last updated 28 July 2026

TinyWebTools is built so that most of what you do here never reaches a server at all. This page explains exactly what happens to your data, including the two places where something does leave your device.

The short version

  • We do not ask you to create an account, and there is nothing to sign up for.
  • We set no cookies and run no analytics, advertising or tracking scripts of any kind.
  • Eleven of our thirteen tools process your files entirely inside your browser. Nothing is uploaded.
  • Two tools need a server to work. They are named below, and what they send is described precisely.
  • We do not sell, rent or share your data, because for the most part we never receive it.

Tools that never send anything

These run completely in your browser using standard web APIs. Your file is read from disk into memory, processed, and handed back to you as a download. Closing the tab erases everything:

  • HEIC to JPG, Image Converter, Image to PDF
  • Merge PDF, Split PDF, Compress PDF
  • Remove EXIF Data, Video to GIF, Screen Recorder
  • Invoice Generator, 2FA Code Generator

The Screen Recorder is worth singling out. There is no server component to it whatsoever, so your recording could not be transmitted even in principle. It exists only in your browser's memory until you save it.

The two tools that use a server

Grammar Checker. The text you submit is sent to OpenRouter, which routes it to a language model to produce corrections. Your text is not written to any log or database on our server. It is handled in memory, passed on, and the result is returned to you. OpenRouter and the model provider it selects will handle your text under their own policies, so do not paste anything confidential.

Search. Your search query is sent to a third-party search API, which returns organic results that we render without advertising or trackers. Queries are not logged on our server.

Both tool pages state this on the page itself. If a tool sends data anywhere, we say so where you use it, not only here.

What our server does record

Two things, both minimal:

  • Abuse prevention. The two server-backed tools keep a short-lived record of a one-way hash of your IP address together with request timestamps, purely to enforce a rate limit. It is stored in a temporary directory, holds no request content, and is not used for anything else.
  • Standard web server logs. Our host records ordinary access information such as IP address, timestamp and requested URL, as essentially every web server does. Our CDN provider, Cloudflare, also processes requests in order to serve the site.

Storage in your own browser

We use your browser's local storage for two conveniences, both of which stay on your device and are never transmitted:

  • Your light or dark theme preference.
  • In the Invoice Generator only, and only if you tick the box, your own business details so you need not retype them. Your client's details and the invoice amounts are never saved.

Clearing your browser data removes both.

Children

These are general-purpose utilities not directed at children, and since we collect no personal information and offer no accounts, we do not knowingly hold data about anyone, including children.

Your rights

Regulations such as the GDPR and the CCPA give you rights to access, correct and delete personal data held about you. In our case there is almost nothing to exercise those rights against, because we do not build profiles, do not use cookies, and do not retain the content you process. If you believe we hold something about you, write to us and we will help.

Changes

If this policy changes in a way that affects what happens to your data, we will update the date at the top and describe the change here.

Contact

Questions about privacy can go to the address on our contact page.