Last updated: October 2026
1. Introduction
alltools.one ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what data our tools and features handle, what we collect, and what you can do about it.
By using our service, you agree to the collection and use of information in accordance with this policy.
2. What Stays on Your Device
Processing runs in your browser. Saving and sharing are optional, require an account, and send your chosen content to our service.
- Formatters, validators, converters, generators, calculators, and image and color tools process your input in your browser. We do not receive what you type or upload into them.
- Processing runs in your browser. Saving and sharing are optional, require an account, and send your chosen content to our service.
- Images you process with the image tools are not uploaded to our servers.
- We do not sell your data and do not use it for advertising.
Data leaves your device only when you use a feature that needs a server: an account, saved snippets, cloud history, share links, or the newsletter. Section 3 lists each one.
3. What We Collect and When
We collect data only for the features below, and only when you use them:
- Account: If you sign in with Google, GitHub or email (through Firebase Authentication), we store your email address, display name, profile picture URL and plan.
- Saved snippets and cloud history: If you are signed in and save a snippet, the tool input you save is stored on our servers. Cloud history records each save with the first 200 characters of its input. Each account keeps up to 500 snippets and 500 history entries.
- Share links: When you create a share link, the shared content is uploaded to our servers, and anyone with the link can view it. Free share links do not expire. Do not share passwords, keys or other secrets.
- Newsletter: If you subscribe, we store your email address, the page you subscribed from, the referring page, your IP address and your browser's user agent, and pass your email address to our mailing list service.
- Email digest: Signed-in accounts receive a monthly email digest by default. Every digest contains an unsubscribe link.
- Usage analytics: Google Analytics records pages viewed, tool events, device type and approximate location, using cookies. Where the law requires consent, it stays off until you accept the cookie banner.
- Error reports: Sentry receives technical error reports (browser, page and error message) so we can fix bugs.
- Server logs and usage limits: Our servers log IP addresses and request details for security. IP addresses are also used to enforce rate limits that protect the service from abuse; those counters expire within 24 hours.
We use this data only to run these features, keep the service secure, and improve it.
4. How We Use Information
We use the information described above to:
- Provide the features you use: accounts, saved snippets, cloud history and share links
- Send the newsletter or digest you receive, which you can unsubscribe from at any time
- Improve the functionality and user experience of our tools
- Detect and prevent abuse, technical issues and security incidents
- Decide which tools to build or improve next
- Optimize our tools for different devices and browsers
5. Our Tools and Privacy
How each category of tools handles your input:
Security & Authentication Tools
- Password Generator: Uses cryptographically secure random number generation in your browser
- Hash Generator: Processing runs in your browser. Saving and sharing are optional, require an account, and send your chosen content to our service.
- JWT Encoder/Decoder: JWT processing is done entirely client-side
Data Format Tools
- JSON Tools: Formatting, validation, minification and conversion happen locally.
- YAML Tools: All YAML processing (parsing, validation, formatting, etc.) happens locally
- CSV Tools: All CSV processing (editing, validation, conversion, etc.) happens locally
- Base64 Encoder/Decoder: All encoding/decoding happens in your browser
- URL Encoder/Decoder: All URL processing happens locally
Design & Image Tools
- Image Tools: All image processing (conversion, resizing, optimization) happens locally
- Color Tools: All color conversions and palette generation happen locally
- QR Code Generator: Processing runs in your browser. Saving and sharing are optional, require an account, and send your chosen content to our service.
- Gradient Generator: All gradient calculations happen locally
Utility & Calculation Tools
- Calculators: All calculations happen locally. The loan calculator asks ipapi.co for your country to pick a default currency.
- IP Address Lookup: Your browser asks ipify.org or icanhazip.com for your public IP address. An address you look up is sent from our server to ip-api.com or ipapi.co.
- Unit Converter: All unit conversions happen in your browser
- Timestamp Converter: All timestamp processing happens locally
- Text Tools: All text processing and comparison happen locally
- Regex Tester: Testing happens in your browser.
- Markdown Previewer: All markdown rendering happens locally
Processing runs in your browser. Saving and sharing are optional, require an account, and send your chosen content to our service.
Save & Share Features
How data behind the save and share features is handled:
- Browser storage: Some tools remember your settings or last input in your browser's localStorage. This stays on your device.
- Share links: Creating a share link uploads the shared content to our servers so the link works for anyone who has it (see section 3).
- Export / Download: Processing runs in your browser. Saving and sharing are optional, require an account, and send your chosen content to our service.
- Saved snippets and history: Stored on our servers with your account. You can delete snippets from your dashboard. To delete history, share links or your whole account, email [email protected].
Processing runs in your browser. Saving and sharing are optional, require an account, and send your chosen content to our service.
6. Third-Party Services
We use these services to run alltools.one:
- Google Firebase Authentication: Sign-in
- Google Analytics: Usage statistics (consent-based where required)
- Sentry: Error reporting
- Email services: Newsletter and digest delivery
- Cloudflare: Content delivery and security
- ipify.org, icanhazip.com, ipapi.co, ip-api.com: Public IP and country lookup in the IP and loan tools
- allorigins.win: Fetches the page you enter in the Open Graph preview tool, to read its meta tags
Each service has its own privacy policy. We share with each one only the data its job needs.
7. Data Security
We protect stored data with access controls and encrypted connections (HTTPS). No system is perfectly secure, so avoid saving or sharing secrets such as passwords or API keys.
Processing runs in your browser. Saving and sharing are optional, require an account, and send your chosen content to our service.
8. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: [email protected]
- Website: https://alltools.one
11. Your Rights
You can:
- Use most tools without an account
- Decline analytics cookies in the cookie banner where it is shown, or block them in your browser
- Delete your saved snippets from your dashboard
- Ask for a copy or deletion of your account data, history and share links by emailing [email protected]
- Unsubscribe from the newsletter or digest with the link in any email
- Clear your browser's local storage for alltools.one