Privacy policy
The values you type into a converter on this site are never sent anywhere. They are converted by code running in your own browser and they stay there. This policy explains that in detail, and is honest about the two places where a third party can see something about your visit: the host, and advertising.
1. Who this policy is from
itoolhub.com is operated by Suraj Giri, of 17625 NE 65th Ct, Redmond, WA 98052, United States. Under the UK and EU General Data Protection Regulation, that is the data controller for this site. Privacy questions and requests go to suraj@theblogtimer.com.
This policy covers the website at itoolhub.com and every tool on it. There is no app, no newsletter and no account system, so there is nothing else for it to cover.
In plain terms: this says who is responsible for the site and how to reach them about privacy.
2. What is collected
What you give the site directly: nothing
There is no sign-up, no login, no newsletter form, no comment box and no contact form on this site. No page asks for your name, your email address, your phone number, your postal address or a payment method, and none is stored.
What you type into a converter: not received
Every converter here runs as code in your browser. Text you paste, numbers you enter, colours you pick and files you drop are read by your browser, converted by your browser, and shown back to you by your browser. None of it is transmitted to this site, and this site could not read it if it wanted to: it is a set of static files with no application server behind it.
The same is true of files. An image is decoded onto a canvas inside your browser and re-encoded from it. A file dropped onto an encoding page is read with your browser's own file reader. Nothing is uploaded, nothing is queued, and nothing is kept once you close the tab.
You can check this. Open your browser's developer tools, choose the network panel, and run a conversion. There is no request to inspect.
What is recorded automatically
Three things are worth knowing about what happens when a page loads, outside the tools themselves.
- Host access logs
- This site is served as static files by Cloudflare Pages. Like any web host, it records requests to keep the service running and to handle abuse: your IP address, the page requested, the time, and your browser's user-agent string. Those logs belong to the host and are handled under the host's own terms. This site's operator does not run separate server logging and does not have a copy of them.
- The web font
- The two typefaces are served from this site's own address, like every other file on it. Loading them sends nothing to a third party.
- No analytics
- There is no analytics script on this site. No Google Analytics, no tag manager, no pixel, no heatmap, no session recorder. Visitor numbers, where readers come from and what they do on a page are not measured.
Cookies and browser storage
This site sets no cookies of its own. It also stores nothing in your browser: no local storage, no session storage, no database. Reload the page and every field is empty again, because nothing was kept.
Advertising, when it is switched on, will set cookies. Section 4 explains what they will do and how to turn personalised advertising off. At the time this page was last built, no advertising code was present on this site and no advertising cookie was being set.
3. The one tool that makes an outside request
The YouTube thumbnail tool is the exception to "nothing leaves the page", and it has to be. To show you the thumbnails for a video, your browser asks YouTube's image host for them. That request goes from your browser straight to Google and carries your IP address, your user-agent string and the video identifier you pasted. It cannot work any other way, and the page says so where you use it.
The picture that comes back is held in your browser. It is not copied to this site, and saving it writes the file your browser already has.
In plain terms: one tool has to ask YouTube for a picture, so YouTube sees that request. Every other tool asks nobody anything.
4. Advertising
iToolHub is free, and it is meant to be funded by advertising served through Google AdSense. No advertising code was present on this site when this page was last built, so nothing described in this section is happening yet. It is written in advance because advertising cannot be switched on before the disclosure exists.
When advertising runs, Google and its advertising partners may:
- set and read cookies in your browser, including a cookie that identifies your browser across sites;
- receive your IP address, your user-agent string and the address of the page the advert appeared on;
- use that information to choose which adverts to show you, to limit how often you see the same one, and to measure whether an advert was seen.
Google's use of advertising cookies is described in its own advertising technologies notice, and the choices available to you are at My Ad Center, where personalised advertising can be turned off for your Google account, and optout.aboutads.info for participating advertising companies more generally. Blocking third-party cookies in your browser also works, and does not stop any tool on this site from functioning.
What is never shared with an advertiser: anything you typed into a converter, any file you opened, and any result you produced. None of it reaches this site, so none of it can be passed on.
5. Consent, and a gap that has to close
Advertising cookies need your consent before they are set, for readers in the European Economic Area and the United Kingdom. This site does not present a consent banner at the time of writing. One has to be in place before advertising is enabled for those readers, and until it is, this section is a statement of what is missing rather than of what is working.
The host's access logs are relied on under legitimate interest: a site has to be served, and the logs are not used to profile you.
6. How information is used
| Data | Who holds it | What it is used for |
|---|---|---|
| IP address, page requested, time, user-agent | Cloudflare Pages, as host | Serving the page, security, abuse handling |
| IP address, user-agent, page address, advertising cookies | Google and its advertising partners | Choosing, capping and measuring adverts |
| IP address, user-agent, video identifier | Google, on the YouTube thumbnail page only | Returning the thumbnail images you asked for |
| Anything you type or open in a converter | You. It stays in your browser | Producing the result you asked for |
| An email you send to the operator | The operator, in the mailbox | Answering you and fixing what you reported |
Nothing is sold. There is no list, no data broker, no enrichment, and no profile built by this site about anybody.
7. How long anything is kept
| Data | Kept for |
|---|---|
| What you type into a converter | Until you close or reload the tab. It is never written down anywhere |
| Host access logs | The host's own retention period, under the host's terms |
| Advertising cookies | The lifetime Google sets for each, which you can end by clearing cookies |
| Email you send to the operator | As long as the matter is open, and no more than 24 months after it closes |
8. Your rights
Wherever you live, you can write to suraj@theblogtimer.com and ask what is held about you, ask for it to be corrected, or ask for it to be deleted. For most people the answer will be that nothing is held, because nothing was collected.
If you are in the UK or the European Economic Area
The UK GDPR and the EU GDPR give you the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object to processing carried out under legitimate interest, and the right to withdraw consent at any time where processing rests on consent.
Requests are answered within one month. If you are not satisfied, you may complain to your national supervisory authority; in the United Kingdom that is the Information Commissioner's Office.
Two of the recipients named above are outside the UK and the EEA. Transfers to Google rely on the European Commission's standard contractual clauses, and on the UK addendum to them for readers in the United Kingdom.
If you are in California
The California Consumer Privacy Act, as amended by the CPRA, gives you the right to know what personal information is collected and to whom it is disclosed, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing. Exercising any of them changes nothing about what this site offers you.
iToolHub does not sell personal information for money. Advertising cookies can amount to "sharing" for cross-context behavioural advertising under that Act, and the opt-out routes in section 4 are how to stop it.
9. Children
This site is a set of conversion tools and is not directed at children. No age is asked for and none could be verified, because no personal information is collected in the first place. If you believe a child's personal information has reached the operator through an email, write to the address above and it will be deleted.
10. Security
The site is served over HTTPS. Its strongest security property is structural rather than technical: there is no database of yours to breach, no account to compromise and no stored file to leak, because none of those things exist. The pages also send X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN and the referrer policy described above.
No system is completely secure. If a breach affecting personal data does occur, affected people and the relevant supervisory authority will be told within the time the law requires.
11. Changes to this policy
The date at the foot of this page is the date its text last changed, taken from the file the page is built from rather than typed by hand. A change that affects what is collected or who receives it will also be noted at the top of the page for 30 days. Continuing to use the site after a change means the current version applies.
12. Contact
Privacy questions, access requests and complaints: suraj@theblogtimer.com. Postal: 17625 NE 65th Ct, Redmond, WA 98052, United States. The contact page lists what to include so a request can be answered without going back and forth.