Legal

Privacy Policy

How we collect, use, and protect your information.

Last updated: June 21, 2026

Information We Collect

We collect information you provide directly, such as account details, links or QR codes you create, and messages you send.

We do not upload or store files you process in tools. File processing happens in your browser, and no personal data is collected from tool usage.

Local-First Processing

All core utility tools (including PDF Merge, PDF Splitter, Image Compressor, Image Resizer, JSON Formatter, Spine Viewer, and Texture Packer) run entirely client-side inside your browser sandbox.

No Server Uploads: Your files are processed locally. They are never uploaded, transmitted, or saved on our servers.

Zero Retention: File buffers in memory are deleted immediately when you close the tab. We do not store any of your document content or graphical assets. This local-first architecture is designed to support privacy-by-design workflows and data-minimization requirements.

Tracking Consent & ePrivacy Compliance

We respect your digital rights and follow the ePrivacy Directive (EU Cookie Law) and PECR standards.

Necessary services stay on only for consent storage, authentication, session integrity, security safeguards, minimal first-party page-view measurement, necessary Mixpanel page-view telemetry, and Mixpanel operational monitoring. Optional Product Analytics (Mixpanel), Google Analytics, and Marketing categories stay off until you enable them.

GDPR Ready: privacy-first controls, consent management, deletion workflows, and vendor governance are designed to support GDPR requirements. Final compliance depends on your organization's implementation and use. We also configure telemetry to avoid direct PII capture and disable Mixpanel IP storage.

Independent Privacy Verification

How to verify our privacy in 30 seconds: Open your browser's Developer Tools (F12 or Inspect Element) and navigate to the Network tab.

Drag a file into any ToolBuddy utility tool (such as the Image Compressor or PDF Splitter) and process it.

Observe the Network tab. You will see that zero network requests are sent to any external server during file processing, proving the processing is entirely local and private.

HIPAA & FERPA Compliance Statement

Healthcare (HIPAA): Because ToolBuddy never sees, stores, or transfers your documents, healthcare professionals can use our tools to crop, organize, or merge files containing Protected Health Information (PHI) while remaining fully HIPAA-compliant.

Education (FERPA): Educational administrators and teachers can securely modify student records or class rosters. Student data remains locked on the local device, ensuring complete FERPA compliance.

COPPA Children’s Privacy

ToolBuddy does not require sign-up or registration to access any of our core utility tools.

We collect no personal information (names, emails, physical addresses, phone numbers) from any user, including children under 13.

How We Use Information

We use your data to operate tools, secure accounts, detect abuse, and improve reliability and performance.

When optional analytics settings are enabled, we may use richer aggregated insights from Mixpanel Product Analytics or Google Analytics to understand deeper product usage patterns and plan new features beyond the necessary page-view baseline.

Cookies and Tracking

Necessary cookies and first-party signals support consent storage, login, session integrity, security features, minimal page-view measurement, and necessary Mixpanel page-view telemetry.

Optional categories are separated into Mixpanel Product Analytics, Google Analytics, and Marketing. Future advertising or campaign integrations must stay inside optional settings unless a stricter legal basis is documented separately.

Data Sharing

We do not sell your personal information and do not share data with third parties for advertising.

We may share limited data with trusted service providers that help run infrastructure, analytics, and support operations.

Data Security and Retention

We apply technical and organizational safeguards to protect your data.

We retain data only as long as necessary for service operations, legal obligations, and abuse prevention.

Your Rights and Choices

You can update account details, request deletion, and manage cookie preferences at any time.

For privacy requests, contact us and we will respond according to applicable law.

Contact for Privacy Questions

For privacy concerns, data requests, or policy questions, contact our team.

Use the Contact page and include enough detail so we can verify and process your request quickly.