Privacy Policy

We believe privacy policies should match the actual code running on the site. Here is an accurate, straightforward breakdown of how Toolcolabs processes your files across both our client-side browser tools and our encrypted server-processed utilities.

Last Updated: October 31, 2026

Standard: Explicit Tool Architecture Labeling & 30-Min Auto-Deletion

GDPR & CCPA Aligned

The 30-Second Summary

How Toolcolabs handles your files, cookies, and privacy:

In-Browser Tools (Zero Upload)

Our Emoji & Symbol Copy Library, JPG to WebP, and PNG to WebP converters run locally in your browser via HTML5 Canvas on modern Chromium and Firefox browsers. Those files stay in your device memory (on iOS/Safari, WebP conversion automatically falls back to our encrypted API).

Server-Processed Tools (Encrypted HTTPS)

Other image conversions (JPG/PNG, HEIC, AVIF, TIFF, BMP, GIF, SVG, ICO), image compression/resizing/editing, and PDF tools (Merge, Split, Compress) upload files over encrypted HTTPS to our processing API for job execution and download.

Automatic Deletion Within 30 Minutes

Temporary input and output files for server-processed jobs are isolated to your anonymous session, automatically purged from temporary storage within 30 minutes of job completion, and never published, indexed, or sold to third parties or AI training datasets.

Zero Public Accounts & Essential Cookies Only

Toolcolabs requires zero user registration or account sign-up. Server-processed tools use two essential first-party HttpOnly cookies for anonymous job ownership and fair-use rate limiting.

Our Processing Architecture: Client-Side vs. Server-Processed

Every tool page on Toolcolabs displays a badge showing how your files are processed.

Unlike websites that claim "100% client-side" for every page while silently uploading files to a backend API, Toolcolabs documents the exact processing mode of each utility:

Processing: In your browser (HTML5 Canvas / Local JS): Applies to the entire Emoji & Symbol Copy Library (/emoji/*), JPG to WebP (/tools/images-converters/jpg-to-webp), and PNG to WebP (/tools/images-converters/png-to-webp) on browsers supporting native canvas.toBlob('image/webp') (Chrome, Edge, Firefox, Brave, Opera). On Safari/iOS where WebKit does not natively export WebP from HTML5 Canvas, our WebP tools automatically fall back to our encrypted HTTPS API so Safari users still receive valid .webp files. In addition, PDF page-count inspection and page thumbnail previews before merging or splitting are rendered locally in your browser using pdfjs-dist.
Processing: Server-processed (Encrypted HTTPS + 30-Minute Auto-Deletion): Applies to image format converters requiring multi-format decoding/encoding (such as JPG to PNG, PNG to JPG, HEIC to JPG, WebP to JPG/PNG, AVIF, BMP, GIF, TIFF, SVG, ICO, and Image/PDF conversions), image compression and resizing tools (Compress Image, Target KB Size, Resize, Crop, Aspect Ratio, Passport Photo, Social Media Resize), image editing tools (Rotate, Flip, Grayscale, Brightness/Contrast, Blur Background, Change Background, Watermark Add/Remove), and PDF document tools (Merge PDF, Split PDF, Compress PDF).

Information We Handle & 30-Minute Retention Policy

A transparent breakdown of data handling across our utilities.

Browser-Processed Files

When you use our in-browser WebP converters or emoji copy tools, your files and clipboard selections stay inside your browser memoryand are discarded as soon as you close or refresh the tab.

Server-Processed Jobs (30-Min Deletion)

When you submit a job to an API-backed image or PDF tool, your input files are transmitted over TLS/HTTPS to our processing backend, assigned an anonymous job ID tied to your session, processed to produce your output file or ZIP archive, and automatically deleted from temporary server storage within 30 minutes.

Zero User Accounts Required

All public image, PDF, and emoji tools on Toolcolabs operate with zero user accounts, zero sign-up forms, and no personal profile collection. We do not ask for your name, email address, or password to use any utility.

Technical Logs & Fair-Use Protection

We collect minimal operational logs (request status, job timing, error diagnostics, and keyed rate-limit hashes) to protect the service from automated abuse and enforce fair-use batch limits.

Cookies & Local Storage

How and why we use browser storage on your device.

We do not use third-party cross-site advertising cookies. Here is the exact browser storage used by Toolcolabs:

Theme Preference (toolcolabs-theme): Stored in localStorage so the interface remembers your light or dark mode choice.
Anonymous Tool Session Cookies: Two essential first-party HttpOnly cookies identify your browser session when polling and downloading server-processed image or PDF jobs and enforcing fair-use limits. The device cookie lasts up to 30 days and the session cookie lasts 15 minutes. They contain no personal name, email, or advertising ID.
Analytics (Google Analytics 4): Used in aggregate to understand page visits and tool performance so we can improve conversion speed and reliability.

Your Global Rights (GDPR, UK GDPR & CCPA / CPRA)

Regardless of where you live, you retain full ownership and control of your data.

We respect data protection principles globally, including the EU General Data Protection Regulation (GDPR), UK GDPR, and the California Consumer Privacy Act (CCPA). You have the right to:

Right to Transparency

Know whether a tool runs locally in your browser or on our encrypted HTTPS processing API before uploading a file.

Right to Erasure

Server-processed files are automatically purged within 30 minutes; you may also contact us regarding any inquiry or log erasure request.

Right to Data Ownership

You retain 100% copyright and ownership of every image or PDF document you process through Toolcolabs.

Right to Non-Discrimination

We never alter tool quality or availability when you exercise your privacy rights.

Security & Contacting Us

How we protect data in transit and answer privacy inquiries.

All traffic between your browser and Toolcolabs is encrypted via HTTPS/TLS. If you have questions about how a specific tool handles your files, contact us anytime:

Have questions about our privacy practices?

Email our team at [email protected] or reach out via our Contact Us page.