Privacy Policy
Last updated: 1 October 2026
The short version
ToolsBay does not collect your files, your text, or an account from you. Every tool on this site except the weather dashboard does all of its work inside your browser. There is no server that receives your documents, because the site is a set of static files with no backend at all. The security policy this site serves lets a page connect only to this site, the Open-Meteo weather API, Google Analytics and Cloudflare Web Analytics. None of those accepts a file.
Who runs this site
ToolsBay is run by Adarsh Bora, based in India, who decides what the site measures and is responsible for the handling of data described on this page. The contact address is at the end.
Files and text you enter
When you open a PDF, image, or spreadsheet in a converter here, the file is read by JavaScript running on your own device. It is never transmitted anywhere. The same applies to anything you paste into a formatter, validator, encoder, or generator. Closing or reloading the tab discards it.
Some tools remember small preferences — for example your chosen colour theme — using your browser's local storage. That data stays on your device and is not readable by us.
The one exception: the weather dashboard
The weather dashboard has to ask an outside service for forecast data. When you search for a city, that city name is sent to Open-Meteo, a free open-source weather API, which returns the forecast. Open-Meteo receives the search term and your IP address as part of that request, as any web request would. No other tool on this site makes an outside request with your input.
Analytics and cookies
This site uses Google Analytics to count visits and see which tools people actually use, which is how we decide what to build and fix next. It records the pages you open, a rough location derived from your IP address, and your device and browser type, and it stores cookies whose names begin with _ga so a return visit is not counted twice. There is no advertising on this site and we run no ad network.
Alongside page views we record three things about tool usage: that a tool was run and whether it succeeded or failed, that a result was downloaded, and that a result was copied to the clipboard. A failed run is also tagged with a broad reason —bad_input, encrypted, unsupported_browser or unknown — because a tool that quietly breaks on some people's files is otherwise invisible to us. Each of these carries the name of the tool, a success or failure flag, and a count of how many files were in the batch.
A download — and only a download — carries one more thing: whether it happened in a normal browser or inside an app's embedded browser, the in-app view you get when you open a link from inside a social or messaging app. That is a two-value label, browser or in_app, worked out from the browser identification string your browser already sends with every request. We do not record the string itself, and the label says nothing about you or your file. It is there because saving a file silently fails in many in-app browsers, and without separating the two we would read those failures as people simply choosing not to save.
What analytics never sees is your content. It records that the JSON formatter was run and that it succeeded; it does not record the JSON. It records that a PDF was converted; it does not record the PDF, its file name, or its size. Your files, and the text you give any tool other than the weather dashboard, stay on your device, and no measurement changes that.
The security policy also permits Cloudflare Web Analytics, which Cloudflare can add to a page when it serves it rather than being part of the site's source — which is why you will not find it in this project's code. When it is switched on, it counts page views, referrers and page-load timings, and unlike Google Analytics it sets no cookies and does not fingerprint your device or follow you between sites. It sees no more of your content than Google Analytics does — which is to say, none of it.
If you would rather not be counted, common content blockers stop the tag from loading, as does a browser with tracking protection switched on. Google also publishes an opt-out add-on that covers every site using Analytics. Every tool here keeps working normally with the tag blocked.
Hosting
The site is served as static files by Cloudflare. Like any web host, Cloudflare processes standard request data such as your IP address and user agent in order to deliver the page and protect against abuse. That handling is governed by Cloudflare's own privacy policy.
Children
These tools are general-purpose utilities and are not directed at children under 13.
Changes
If this policy changes, the “last updated” date above will change with it. Anything you put into a tool stays on your device, so a change here would concern measurement of the site rather than collection of your content.
Contact
Questions about privacy on this site can go to adarshsanjaybora@gmail.com. See also the terms of use.