Privacy Policy
Last updated September 4, 2026
OneTool is built so that there is almost nothing to collect. Every tool runs in your browser, your files are never uploaded, and there are no accounts. This page spells out the details.
The short version
- Files you open in a tool stay on your device — no uploads, ever.
- No accounts, no sign-up, no personal details requested.
- Local storage holds only your theme and tool preferences.
- Google Analytics measures aggregate traffic; you can opt out.
- No ads are served today, and no data is ever sold.
Your files never leave your device
Every tool on OneTool runs entirely in your browser using standard web APIs (Canvas, WebAssembly, Web Workers). When you pick an image, PDF or any other file, it is read into your browser's memory and processed there.
There is no upload step and no server that receives your files. We never see, store, transmit or analyse the content of anything you open in a tool — including file names, image contents, PDF text and any metadata inside them.
Results you download are generated locally and saved straight to your device. Closing or reloading the tab discards whatever was loaded.
No accounts, no sign-up
The site has no login, no user accounts and no newsletter. We do not ask for your name, email address, phone number or payment details, and there is no database of users to leak.
What is stored on your device
A few small preferences are saved in your browser's local storage so the site behaves consistently between visits. This data stays on your device, is readable only by this site, and is never sent anywhere:
- Theme preference — whether you chose light, dark or system appearance.
- Tool settings — non-file options you last used in tools such as the screenshot resizer and studio (for example output format, quality and device selection).
- Offline cache — the site registers a service worker that caches pages and assets so tools keep working without a connection. It caches the app itself, never your files.
Clearing what is stored
You can remove everything at any time by clearing site data for this domain in your browser settings (in Chrome: Settings → Privacy and security → Third-party cookies → See all site data and permissions; in Safari: Settings → Privacy → Manage Website Data). Using a private or incognito window keeps nothing after the window closes.
Analytics
We use Google Analytics 4 to understand aggregate traffic — which pages and tools are visited, roughly where visitors come from, and which browsers and screen sizes to support. It reports page views and coarse events like a tool being opened. The content of your files is never part of that.
Google Analytics sets cookies and processes technical data including your IP address (which Google truncates/anonymises before storing), user agent, referring page and approximate location derived from the IP. Google acts as our data processor for this; see Google's own privacy notice for how they handle it.
You can opt out with Google's official browser add-on, by blocking analytics in your browser or an extension, or by enabling Do Not Track / Global Privacy Control in browsers that block trackers by default. The tools work exactly the same either way — nothing on this site requires analytics to function.
Advertising
The site does not currently serve ads and no advertising scripts are loaded. If that changes, this page will be updated before any ads go live, naming the ad network and the choices you have.
Hosting and server logs
The site is a set of static files hosted on Cloudflare Pages. Like any web host, Cloudflare processes standard request data — IP address, user agent, requested URL and timestamp — to serve pages and protect against abuse. We do not build profiles from these logs, and they never contain file contents, because your files are never sent to a server.
Third-party services
- Google Analytics — aggregate usage measurement, as described above.
- Cloudflare Pages — hosting and content delivery.
- Fonts are bundled and served from this domain, so loading a page makes no request to Google Fonts.
- Tools do not call external APIs. There is no server-side processing to send your data to.
Children
The site is a general-purpose utility and is not directed at children under 13. We do not knowingly collect personal information from anyone, children included, since no personal information is requested at all.
Your rights
Privacy laws such as the GDPR and CCPA give you rights to access, correct, delete or port your personal data, and to object to its processing. Because we hold no accounts and no file data, there is generally nothing on our side to retrieve or erase — the local storage described above is deleted by you, from your own browser.
For the analytics data Google processes on our behalf, you can exercise these rights by contacting us at the address below, and you can stop future collection at any time by opting out. We do not sell or share personal information, and there is no data to sell.
Changes to this policy
If the way the site handles data changes — new analytics, advertising, or any feature that involves a server — this page will be updated and the date at the top revised before the change ships.
Contact
Questions about this policy, or a privacy request? Email ambitionprojectappstudio@gmail.com.