Privacy Policy

Your files and input never reach our server

Image and PDF editing, signatures and stamps, QR codes, hashing, text counting and the rest all run inside your browser. Files you choose are not uploaded and text you type is not transmitted. None of the following is sent to us, stored, or logged.

• The contents of any image or PDF you open
• Text you type and the results produced from it
• Signature and stamp drawings
• Anything you put in a QR code, including a Wi-Fi password if you type one
• Generated hash values
• Business details entered into the nameplate tool

Requests that leave your browser

Opening the "My IP address" tool calls /api/ip once. That request simply reads back the IP address already present in your connection; it is not stored, not logged and not cached.

To learn which tools people actually use, the site sends a very small signal to /api/signal. It carries one of two things: the name of the tool you just downloaded or copied a result from, or a single search phrase you typed. Search phrases are stripped of every digit in your own browser before they are sent ("$200 off 15%" becomes "$### off ##%"), are dropped entirely if they contain an email address, and are cut at 40 characters. They are deleted after 180 days. No IP address or device identifier is sent or stored with them, and nothing you uploaded or typed into a tool is included.

In the "Country codes" tool, picking a country downloads one small file for that country (/data/country/{code}.json), so the data for 250 countries is not carried around up front. Only the two-letter code leaves your device, and what you looked at is not stored.

No other tool contacts a server.

Loading the site itself does pass through our hosting provider (Cloudflare), so their standard security and access logs are governed by their policy rather than ours.

What is kept in your browser

To remember your settings, only the values below are stored locally in this browser. None is sent anywhere, and clearing this site's data removes them.

• plaintoolkit-theme — whether you chose the light or dark appearance
• plaintoolkit-lang — the language you picked, used only to suggest it next time
• plaintoolkit-admin-user — only if ‘remember my ID’ is ticked on the operator sign-in screen: that ID alone (operators only; the password is never stored)

Cookies and analytics

No cookie is set for ordinary visitors. The only cookie this site writes is one session cookie (pt_admin) on the /admin path, and only when the operator signs in to the admin screen. Our hosting provider may set cookies for security purposes under their policy.

Since 21 October 2026 we use Cloudflare Web Analytics. It sets no cookies, does not identify you and does not follow you across other sites. It records which page was viewed, where the visit came from, the country, the device and browser type, and how long the page took to appear — all as aggregate figures. Nothing you type into a tool, and no file or image you open, is included. The totals live with Cloudflare; we store nothing ourselves.

We do not sell personal information

PlainToolkit does not sell your information. As described above, there is very little to sell in the first place. Where an external service such as advertising or hosting is actually in use, that provider processes data under its own policy.

Changes

If the service, the law, or a third-party policy changes, this page is updated to match how the site actually works. The date at the top shows when it was last revised.

Contact

Questions about this policy or about how data is handled go to contact@plaintoolkit.com. Mail is read only to answer it and is not stored on this site.