In short
- Image and JSON tools run in your browser. Your images and JSON are never uploaded.
- File Comparison sends your two texts to our server to compare them. They are not saved.
- We count how often each tool is used per day, by account or by network address, to apply free daily limits.
- Google Analytics only runs if you accept it in the cookie banner.
- We don't sell your data and we don't show ads.
Your files and text
Image Converter, Image to PDF and the JSON Toolkit do all their work inside your browser. The pictures, PDFs and JSON you work with stay on your device and are never sent to us. To apply the daily limit, your browser only tells our server that one conversion happened and how large the input was.
File Comparison sends the two texts you compare to our server, which works out the differences and sends the result back. The texts are processed in memory and are not stored or logged. Please don't paste passwords, keys or other secrets into any online tool, including ours.
If you create an account
We store:
- your email address and, if you give one, your name;
- your password, only as a one-way bcrypt hash that cannot be turned back into the password;
- when you signed up and last logged in, and the package you are on;
- one record per signed-in device: its network address, browser name (user agent), and when it was last active. You can see these on your dashboard and log devices out. A record is deleted when you log out, and expires after 7 days at most.
To protect accounts, failed login and sign-up attempts are counted per network address and per email address for a short time (minutes to an hour).
Daily limits and usage records
Each tool has a free daily allowance. To apply it, we record per day how many times each tool was used: for accounts, against the account; for visitors who are not logged in, against their network (IP) address, stored as a keyed hash. We also keep a usage log with the network address, the account (or “guest”), the tool, the number of uses and the time of last use, so we can spot abuse and reset limits when needed. These records never contain your files or text.
Google Analytics
If you accept analytics cookies, we use Google Analytics 4 to understand which pages are visited, how people find the site and which tools are useful. Google receives information such as the pages you view, your approximate location (country or city), your device and browser type, and how you arrived. It does not receive your files, your text or your account details. Analytics never runs on our admin pages. Google processes this data under its own privacy policy. If you decline, Google Analytics is not loaded at all.
How long we keep data
- Device sign-ins: until you log out, or 7 days at most.
- Login and sign-up attempt counters: minutes to an hour.
- Accounts: until you ask us to delete yours.
- Usage records: as long as needed for daily limits and statistics. We delete them on request.
- Google Analytics data: according to the retention period set in Google Analytics (14 months at most).
Your choices and rights
You can use most tools without an account, and decline analytics cookies. You can ask us for a copy of the data we hold about you, ask us to correct or delete it, or object to how we use it. Depending on where you live (for example under the GDPR in the EU and UK), you may also complain to your local data protection authority.
Contact
For any privacy question or request, contact us at info@devitools.com. We may update this policy when the site changes; the date at the top shows the latest version.