Privacy Policy

Last updated: August 22, 2026

The short version

Widget.tools is a collection of free, browser-based tools for working with images, PDFs, text, and code. The overwhelming majority of what these tools do — converting an image, formatting some JSON, generating a hash, signing a PDF — happens entirely inside your own browser. Your files are not uploaded to a server, because for almost every tool on this site, there is no server in the loop at all: the page you load contains the code, and your browser runs it locally using its own built-in APIs (Canvas, Web Crypto, and similar).

This policy explains that in detail, names the one tool that works differently, and is honest about what a static website hosted on someone else's infrastructure necessarily involves even when the site itself collects nothing.

What we don't collect

We don't have:

  • User accounts, sign-up forms, or passwords
  • A database that stores anything about you or your files
  • Contact forms, newsletters, or comment sections
  • Analytics or tracking scripts of any kind (no Google Analytics, no Meta Pixel, no Plausible — nothing)
  • Advertising of any kind, at this time
  • Cookies set by this site

That last point is worth being precise about: we checked our own server responses, and this site does not set any cookies. If your browser shows a cookie from this domain, it did not come from code we wrote — please let us know using the contact details below so we can look into it.

How your files are processed

Every tool's own page states plainly whether it's local-only or, in rare cases, contacts a third party — look for the notice directly above each tool. As a general rule:

  • Image and PDF tools (converting, compressing, resizing, cropping, merging, splitting, signing, watermark removal) run using your browser's Canvas and file APIs. The file you drop in is read into memory by your browser, processed there, and the result is offered back to you as a download — it never leaves your device.
  • Text and code tools (formatters, generators, hash calculators, the JWT and HTML encoders/decoders, and so on) process whatever you type or paste using JavaScript running on the page. Nothing you type is sent anywhere as you type it.
  • The password generator uses your browser's cryptographically secure random number source (crypto.getRandomValues()), not a server, to generate passwords — nothing is ever transmitted, and nothing is stored after you close or refresh the tab.

The one exception: YouTube Thumbnail Downloader. This tool works by building a direct link to a YouTube video's publicly available thumbnail images and letting your browser fetch them from YouTube's own servers (img.youtube.com) — that's simply how a public thumbnail is retrieved; there's no other way to get it. When you use this specific tool, the video ID or URL you provide is sent to YouTube as part of that image request, the same as it would be if you pasted that thumbnail's URL directly into a new browser tab. We don't see, log, or store that request ourselves; it goes from your browser straight to YouTube, whose own privacy policy governs what YouTube does with it. Every other tool on this site does not behave this way.

Cookies and local storage

This site does not use cookies. It does use your browser'slocal storage — a different, cookie-free browser feature — for exactly one thing: remembering whether you last chose light or dark mode, so the site opens in your preferred theme next time. That preference is stored only on your own device, is never transmitted anywhere, contains no personal information, and can be cleared at any time by clearing your browser's site data for this domain.

Analytics and advertising

None are active today. This site's codebase has a reserved, currently-disabled placeholder for future ad slots and an empty, currently-disabled affiliate-link configuration — both exist only as architecture for a possible future launch and render nothing on any page right now. If either is ever switched on, this policy will be updated first, with a new "last updated" date above, before that happens — not after.

Hosting and infrastructure

This site is hosted as a static website on Cloudflare Pages. Serving any website over the internet necessarily involves the hosting provider's own infrastructure seeing standard connection information — your IP address, browser user-agent, and the pages you request — the same way any web server anywhere does, in order to deliver the page to you at all. We do not configure any analytics or logging beyond Cloudflare's own infrastructure-level handling of that traffic, and we do not access, export, or use Cloudflare's server logs for any purpose. Cloudflare's own privacy policy governs how it handles that connection-level data as our hosting provider.

Third-party code libraries

A few tools rely on open-source code libraries that run entirely inside your browser alongside the rest of this site's own code — they are not remote services and do not communicate with anything while running:

  • pdfjs-dist (Mozilla's PDF.js) for reading and rendering PDF pages
  • pdf-lib for writing new PDF files (merging, signing, and similar)
  • libheif-js for decoding HEIC/HEIF photos

Each is downloaded once as part of the page's own code (only when you actually use a tool that needs it) and then runs locally — the same trust boundary as the rest of this site, not a separate third-party data processor.

Children's privacy

This site is not directed at children and we don't knowingly collect personal information from anyone, of any age — which, given everything above, is a fairly simple promise to keep, since there's essentially nothing to collect in the first place.

External links

Aside from the YouTube thumbnail requests described above, this site's tool pages don't link out to external sites as part of their normal operation. Where a page does link elsewhere (for example, in written content or a future blog post), that link is provided for convenience only — we aren't responsible for the privacy practices or content of sites we don't control, and visiting them is subject to their own policies, not this one.

Changes to this policy

If how this site handles data ever changes — for example, if analytics or advertising is switched on in the future — this page will be updated first, with a new "last updated" date at the top, so you can always see exactly what's changed and when.

Contact

Questions about this policy or how a specific tool works? Reach us at [email protected].