Privacy Policy

Last updated: September 5, 2026

1. Basic Policy

Tools Hub (the "Service") is designed with user privacy as its top priority. All tools provided by the Service process data entirely in the user's browser (client-side).

2. Handling of Files

Files uploaded to the Service (images, PDFs, text, etc.) are processed only within the user's browser. Files are never sent to or stored on our servers or any external server during processing. When the browser is closed, the files are discarded from the device.

3. Analytics

Only after optional consent, a random browser ID, event names, tool/lesson IDs, language and viewport bucket are sent to our same-origin API. This is pseudonymous measurement of return visits, not anonymous data. Inputs, answers, keys, file names or contents, search terms, full URLs, IP addresses and User-Agent are not stored in the metrics database. Consent stops after 90 days without automatic renewal. IDs and events older than 90 days are excluded from queries and progressively removed by bounded maintenance on subsequent API requests. Daily event counts without IDs become eligible for deletion after 13 months. Withdrawal stops measurement and requests deletion of the ID and events. If the network request fails, only deletion credentials remain locally for retry, and deletion is shown as unconfirmed. Previous aggregate counts without IDs remain.

4. Cookies and Local Storage

Theme, favorites, recent tools and usage counts are stored in the browser. Notepad content and test account notes are stored in localStorage as plain text. Do not use test account notes for important credentials. Progress from the retired CTF course may remain on your device and can be removed using your browser’s site-data settings. If you consent to measurement, a pseudonymous browser ID and deletion token are stored locally for 90 days. Tools remain usable if storage is unavailable, but unsaved progress is lost when you leave the page.

5. External Services

The Service is hosted on Cloudflare Workers. We plan to use Google AdSense for monetization (ads will start serving after approval). Google AdSense may use cookies to serve and measure ads. This may result in interest-based ads based on your browsing history. You can opt out of ad personalization at Google's Ads Settings page (https://adssettings.google.com). For details on Google's use of cookies, please see Google's Privacy Policy (https://policies.google.com/privacy).

6. Contact

If you have any questions or feedback about this policy, please use the contact page.

Contact us
Optional usage measurement settings

Only with your consent, a random browser ID and tool/learning events are sent to measure return visits. This is pseudonymous measurement. Inputs, answers, keys, files and search terms are excluded. Consent expires after 90 days. Declining does not limit any feature.

Measurement is off.

Retention and privacy