PRIVACY
Short version: the site collects as little as possible.
Local-first tools, plain data-flow labels, and clear disclosure when a tool needs an outside service.
Tools
Most tools run in your browser. Files, pasted text, passwords, and generated results stay on your device unless a tool clearly says it needs an outside service.
Outside services
Some network, breach, IP, and lookup tools require external APIs because the data cannot be checked locally. Those pages label the call before use. Contact-form delivery uses FormSubmit.
Analytics
Google Analytics loads in consent mode for every visitor, except those whose browser sends Do Not Track or Global Privacy Control — those signals disable it entirely and override acceptance. Until you accept, it runs with analytics storage denied: it sends cookieless page-view counts with no cookie, no identifier and no personal data, and it records no tool, search or share activity. Accepting lets the same property use a cookie and an identifier, so the measurements are more accurate. Advertising storage, ad personalization and cross-site ad signals stay disabled in every case, because this site runs no ads. Your choice is stored locally for up to 180 days and can be changed with Analytics preferences in the footer. Denying stops identifier-based collection; it does not erase data already collected by Google, and it does not stop the cookieless page-view counts.
Contact messages
Messages submitted through the web form pass through FormSubmit before reaching the project inbox. For sensitive material, use a direct channel instead.
Last updated: November 7, 2026