Privacy Policy
Your privacy is fundamental to ToolBox. Most of our tools process your data entirely within your browser. Here is a full breakdown of what data we handle and how.
Data Processing
The majority of tools on ToolBox run 100% client-side using JavaScript in your web browser. Your input data for these tools - whether it's JSON, images, PDFs, passwords, or other content - is processed locally on your device and is never transmitted to any server.
However, some tools require server-side processing to reach external APIs that can't be called directly from a browser. These include: DNS Lookup, SSL Checker, IP Address Lookup, Link Checker, Grammar Checker (via LanguageTool), Text Translator (via MyMemory), SEO Analyzer, PageSpeed Checker, HTTP Headers Checker, Redirect Checker, Speed Test, OG Fetcher, and Exchange Rates. For these tools, the data you enter (such as a URL or text) is sent through our server as a proxy. We do not log, store, or retain this data - it is processed in memory and discarded after the response is returned.
Accounts and Personal Data
Free tools do not require an account or login. You can use them without providing any personal information.
If you choose to create an account (required for Pro features), we collect and store your email address and optional display name in our database (hosted on Supabase). If you are a logged-in user, we may also sync your tool preferences, favorites, workspaces, and presets to our database so they work across devices. You can delete your account and all associated data at any time.
What We Do Not Do
- We do not use cookies for tracking purposes
- We do not sell or share your data with third parties for marketing
- We do not use tracking pixels or fingerprinting
- We do not log tool input/output data on our servers
Analytics
We may use privacy-respecting, cookie-free analytics to understand general usage patterns (such as which tools are most popular). This data is aggregated and anonymous - it cannot be used to identify individual users.
Local Storage
Some tools may use your browser's localStorage to save preferences or usage counts (such as the SEO Analyzer free tier limit). This data stays on your device and is never sent to our servers. You can clear it at any time through your browser settings.
Local AI Models (WebLLM)
Our Pro AI tools (AI Chat, AI Code Explainer, AI Text Summarizer) run large language models directly in your browser using WebGPU. When you first load a model, the model weights are downloaded from a public CDN and cached by your browser. After that initial download, the model runs entirely on your device.
- Your prompts, inputs, and AI-generated responses never leave your device
- We cannot see, access, or log any of your AI interactions
- Model weights are generic and not tied to any user data
- You can clear the cached model files through your browser settings at any time
Third-Party Services
Several tools proxy requests through our server to reach external APIs. In all cases, data is processed in memory and not logged or stored. These tools and the services they use include:
- Grammar Checker sends your text to LanguageTool API for analysis
- Text Translator sends your text to MyMemory Translation API
- SEO Analyzer fetches the HTML of the URL you enter
- DNS Lookup queries Google/Cloudflare DNS and RDAP services
- SSL Checker queries crt.sh for certificate history
- PageSpeed Checker uses Google PageSpeed Insights API
- Exchange Rates fetches data from the ECB via Frankfurter API
- IP Address Lookup queries ipapi.co
BYOK (Bring Your Own Key) tools like AI CSS Generator and AI Regex Generator send data directly from your browser to the AI provider (OpenAI or Anthropic) using your own API key. Your key is stored only in your browser's localStorage.
Payment Processing
If you purchase a Pro subscription, payments are processed by Dodo Payments, our payment processor. Dodo Payments collects and processes your payment information (such as credit card details, billing address, and email) directly. We do not have access to your full payment details - we only receive confirmation of your subscription status.
Dodo Payments may use your information in accordance with their own Privacy Policy. Dodo Payments handles all payment processing and invoicing on our behalf.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated effective date.
Last updated: March 2026