Privacy Policy

Summary

The files and text you put into a tool on this site are processed inside your own browser and are never transmitted to us or to anyone else. That is a property of how the tools are built, not a promise about how we behave.

Separately from the tools, this site uses Google Analytics and Google AdSense. Those services set cookies and collect information about your visit, including an advertising identifier. That is ordinary website tracking, it is not connected to anything you type into a tool, and this notice explains it in full below.

1. Who is responsible for your data

This site is operated by Test Tools, which is the data controller for the purposes of the UK and EU General Data Protection Regulation and the equivalent operator or business under other privacy laws. Contact details are at the end of this notice.

2. What the tools do not send anywhere

Every tool on this site runs as JavaScript inside your browser. When you compress an image, merge a PDF, format JSON, hash a string or generate a password, the file or text is read into your device’s memory, processed there, and written back out as a download. No copy is uploaded, so there is no copy on any server to be stored, logged, retained, sold or exposed in a breach.

You do not have to take our word for it. Open your browser’s developer tools, switch to the Network tab, and use any tool. You will see the page and its scripts load, and no request carrying your content.

One tool is a deliberate exception, and it is labelled as such on its own page. The Page Speed Auditor exists to test a website you name, so the address you enter is sent to the Google PageSpeed Insights API in order to run the audit. Nothing else about you is sent with it. If you would rather not share a URL with Google, do not use that tool.

3. What we do collect

Three things, none of which involve the contents of a tool:

• Server logs. Our hosting provider records the usual web server information for every request: IP address, browser user agent, the page requested, and a timestamp. This is how any web server works and it is necessary to keep the site running and to investigate abuse.
• A single browser setting. We store one value in your browser’s local storage, named msm-theme, which remembers whether you chose the light or dark appearance. It contains no identifier and never leaves your device. Clearing your browser data removes it.
• Anything you choose to send us. If you write to us or submit the data request form, we receive what you put in it, and we keep it only as long as it takes to deal with your message.
• A count of how often each tool is opened and used. We record one number per tool per day, so we know which tools are worth improving and which nobody wants. It is a tally and nothing more: no identifier, no address, no record of who did what or what they put in. Two people using the same tool are indistinguishable in it, including from us.

4. Cookies, analytics and advertising

Our own code sets no cookies at all. The cookies on this site come from two Google services.

Google Analytics tells us how many people visit, which tools are used, and which pages people arrive on and leave from. It is how we decide what to build next. It sets cookies and processes an online identifier derived from your device and IP address.

Google AdSense displays the advertising that pays for the site being free. Google and its advertising partners may set cookies and use advertising identifiers to measure and, where permitted, personalise the adverts you see. Under the California Consumer Privacy Act and several other US state laws, this kind of advertising counts as a sale or sharing of personal information even though no money is paid to us for your data. You can opt out at any time using the links below.

Where the law requires consent before non-essential cookies are set — in the United Kingdom, the European Economic Area and Switzerland — these services load only after you have given it, and you can change or withdraw your choice at any time through the consent controls on the site. You can also opt out of personalised advertising directly in Google’s own Ads Settings, and manage Analytics with Google’s browser opt-out add-on.

We honour the Global Privacy Control signal. If your browser or extension sends one, we treat it as an opt-out of sale and sharing for that browser, without you needing to do anything else.

5. Who receives data

We do not sell your personal information for money, and we do not share it with anyone beyond the following:

• Our hosting provider, which necessarily processes server logs in order to serve the site.
• Google, as the provider of Analytics and AdSense, and — only if you use the Page Speed Auditor — as the provider of the PageSpeed Insights API.
• Anyone we are legally required to disclose to, such as in response to a valid legal order.

6. Why we are allowed to process it

Under the UK and EU GDPR we rely on two legal bases. Server logs and basic security are processed under our legitimate interest in operating a functioning, non-abused website. Analytics and advertising cookies are processed on the basis of your consent, which you are free to refuse and free to withdraw later without any effect on your use of the tools. Withdrawing consent does not disable any tool.

7. How long we keep it

Server logs are retained by our host for a short operational period and then rotated out. Analytics data is retained according to the retention setting configured in Google Analytics. Messages you send us are deleted once the matter is closed, unless we need to keep them to resolve a dispute or meet a legal obligation. Nothing you enter into a tool is retained at all, because it is never received.

8. International transfers

This site is available worldwide, and the services described above are operated by companies that may process data outside your own country, including in the United States. Where personal data covered by UK or EU law is transferred, those transfers rely on the safeguards published by the provider concerned, such as the European Commission’s standard contractual clauses.

9. Your rights

Depending on where you live, you may have some or all of the rights below. We do not check which country you are in before honouring a request — whoever you are and wherever you are, you get all of them:

• Access — ask what personal information we hold about you.
• Deletion — ask us to erase it.
• Correction — ask us to fix anything inaccurate.
• Portability — ask for a copy in a machine-readable form.
• Opt out — of the sale or sharing of your personal information, and of targeted advertising.
• Withdraw consent — at any time, for anything you consented to.
• Non-discrimination — exercising any of these rights will never degrade the site for you. Every tool keeps working exactly the same.
• Complain — to your national data protection authority if you think we have got something wrong. We would rather you told us first so we can fix it.

10. How to make a request

Use the data request form, or write to muhammadshoaibmuneeb@gmail.com. We answer every request, including requests that turn out to be about data we do not hold.

Be aware of what we can realistically find. Because we require no account and store no profile, we usually have no way to connect a server log entry to a named person. If you ask us to delete your data and we hold nothing identifiable about you, we will tell you that honestly rather than pretend to have deleted something. For Analytics and advertising data held by Google, we will also point you to Google’s own controls, which reach further than ours do.

We aim to respond within 30 days. We may ask for enough information to be confident the request is really yours, and we will not use anything you send for that purpose for anything else.

11. Children

This site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, tell us and we will delete it.

12. Security

The site is served over HTTPS. The strongest security measure here is architectural rather than procedural: for the overwhelming majority of what happens on this site, there is no data on our side to protect, because your files never arrive.

13. Other sites

Some pages link to third-party websites, and adverts link to advertisers. Once you follow such a link you are on someone else’s site under someone else’s privacy policy, and this notice no longer applies.

14. Changes to this notice

If we change what we collect or who receives it, we will update this page and change the date below. Material changes affecting cookies will also be reflected in the consent controls, so you get the chance to make a fresh choice.

15. Contact

Use the data request form, or write to muhammadshoaibmuneeb@gmail.com. We answer every request, including requests that turn out to be about data we do not hold.