Privacy Policy & Data Protection
At OmniTools, privacy is not a checkbox or an afterthought — it is the foundational architectural principle of the entire platform.
The Core Rule: We Do Not Retain Your Tool Inputs
When you paste code, type numbers, format JSON, or analyze text on OmniTools, your data does not get saved to a database, logged to server telemetry, or sold to third-party ad networks. In fact, for the vast majority of our tools, your data never even leaves your web browser.
1. Client-Side First Execution
If a tool can technically run inside your web browser using modern Web APIs and JavaScript, it runs in your browser. This includes:
- JSON Formatting, Minification, & Validation
- Base64 Encoding & Decoding
- Word & Character Counts, Text Transformations
- Calculators, Unit Conversions, & Math Tools
For all tools marked with the In-Browser badge, open your browser's DevTools Network tab: you will see exactly zero requests sent when you type or execute conversions.
2. Server-Side Temporary Processing Model
For future heavy processing tools (such as multi-megabyte PDF operations or video transcoders) where server acceleration is required, we enforce a strict temporary processing pipeline:
Files are automatically purged as soon as the result is delivered. We do not maintain any archival file storage or document backups.
3. Database Hygiene
Our PostgreSQL database schema contains only administrative and platform metadata tables (e.g. tool category names, site configuration flags, and feature status). There are zero database tables designed to store user tool inputs or outputs.
4. Automatic Logging Redaction
Our backend logger (Pino) is configured with automated redaction filters. Headers, request payloads, and query arguments containing user content are stripped before any log is written to standard output.
5. No Advertising Tracking Cookies
We do not use invasive third-party ad networks, fingerprinting scripts, or cross-site tracking cookies. Your theme preference (Dark / Light) is stored locally in your browser's localStorage and never transmitted.