Skip to content
Privacy

Tools stay on your device. Live data asks for as little as possible.

Short, because there is not much to say.

The facts

  • Accounts are optional, and every tool works without one. Signing in is a link to your email — there is no password.
  • No cookies, no analytics, no advertising or tracking scripts.
  • Tools never upload: files, text and numbers you enter are processed in your browser.
  • Live pages contact only the open data sources listed below, and only for what they show.
  • Your city, favourites, recent tools and saved lists are kept on this device only.

Data sources this site can contact

Nothing is requested until you use a live feature. Weather and city search go through our own server, which fetches the forecast from MET Norway for you. Every other live feature talks to its source directly from your browser, so that source sees your IP address and our site’s address, never the page you are on.

  • SmartTools API (Operated by SmartTools) — Our own server at api.toolsdev.in. For weather: the place name you type into the city search, and the rounded coordinates (about 1 km) of the city you chose — or, once after you tap “Use my location”, of your position, to name the nearest town. For an IFSC lookup: the code you type. For world holidays: the country and year you pick. For a dictionary lookup: the word — sent inside the request rather than in its address, so it stays out of the server’s access log, and stored as a definition of that word with nothing recorded about who asked. It fetches news, currency rates, holiday lists and branch details itself, on a schedule or on request, so none of those sources ever sees your browser. Answers are cached and nothing is linked to you. If you choose to sign in: your email address, so we can send the link and know whose account it is — there is no password anywhere, and signing out or deleting your account removes it from our server. Everything on this site that does not need an account works without one. Like any web server, its hosting keeps standard access logs (IP address, time, address requested) for security.
  • Have I Been Pwned — Pwned Passwords (No licence or attribution requirement) — The first 5 characters of a password’s SHA-1 hash — never the password.
  • Wikimedia (CC BY-SA 4.0) — Nothing about you — article images load from Wikimedia’s image servers. The text comes through our server.

How that is enforced

The site is served with a Content Security Policy that lets the page connect only to its own address and the sources listed above. Even if a tool wanted to send your data somewhere else, the browser would block it.

Your location is never read unless you tap “Use my location”, and your browser asks you first. Coordinates are rounded to about a kilometre before they are used or saved.

Processing locally means nothing is uploaded. It does not make a shared or compromised device safe, and it does not make a file forensically clean — each tool's notes say where that matters.

Export or delete what is stored

Go to You to forget your city, download everything this device has saved as one JSON file, or delete all of it. Clearing your browser's site data does the same.