Your Privacy is Our Foundation
ToolBox is built from the ground up with a single guarantee: your data never leaves your device. We have no backend servers, no databases, and no tracking systems.
All computation happens in your browser. No text, files, or inputs are ever transmitted over the network.
We operate no databases. There is no storage layer capable of holding your data — by design.
No sign-up, login, or account is required. We intentionally have no user identity system to protect.
We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts that collect user behaviour.
Data Processing Architecture
ToolBox is a static, client-side web application. Every tool — from the Word Counter to the Password Generator — runs entirely using JavaScript executed inside your web browser. When you type text into a ToolBox tool:
- The text is stored in your browser's memory (RAM) only while the tab is open.
- No network requests are made with your input data.
- When you close the tab, all data is immediately discarded.
- We have no server-side endpoint to receive data even if we wanted to.
What Data We Do Not Collect
We explicitly confirm we do not collect or store:
- Any text you enter into our tools
- Files you upload or process
- Your IP address (no server-side logging)
- Browser fingerprinting data
- Session or user-behaviour data
Cookies & Local Storage
ToolBox does not set any cookies. We do not use browser localStorage or sessionStorage to persist your input data between sessions. Any state managed by the application lives only in memory and is cleared when you navigate away.
Hosting & Infrastructure
This website is served as a collection of static HTML, CSS, and JavaScript files. We use standard static hosting (e.g., GitHub Pages) which may log standard HTTP access logs (IP address, page requested, timestamp) as part of routine infrastructure operation. These logs are controlled by the hosting provider and are not accessible to or used by ToolBox for any purpose.
All pages are served exclusively over HTTPS to ensure the transport layer between your browser and our CDN is encrypted.
Security Headers
To further signal and enforce a secure environment, every page on this platform includes a strict Content-Security-Policy (CSP) meta tag. This technical header prevents any unauthorized external scripts from executing on our pages, protecting you from third-party injection attacks.
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;
Contact
If you have any questions about this Privacy Policy or our zero-data architecture, you are welcome to review the source code directly — this entire application is built with plain HTML, CSS, and Vanilla JavaScript with no obfuscation.
Last updated: April 2026