Privacy Policy
Every tool on this site runs entirely in your browser. Your files and text never leave your device.
Everything runs on your device
Clean.tools is a static website. When you use a tool, the work happens in your browser using standard web APIs such as Canvas, Web Crypto, and Web Audio. The images, documents, and text you drop in are processed locally and are never uploaded to a server. When you close the tab, nothing about your session remains with us.
There are no user accounts and nothing to sign up for. We cannot see what you convert, resize, redact, hash, or calculate, because that data is never transmitted anywhere.
No tracking and no analytics
This site runs no analytics, no advertising scripts, no tag managers, and no third-party tracking of any kind. We do not set tracking cookies and we do not build a profile of you. A tool may use your browser's own local storage to remember a preference on your device, but that stays on your device and is never sent to us.
No third-party fonts or CDNs
The site does not load fonts from Google Fonts or any third-party font service, and it does not pull JavaScript from a CDN. Fonts and scripts are served from clean.tools itself, so browsing the site does not quietly hand your IP address and referrer to another company.
External calls
The tools make no external network calls. Once a page has loaded, you can turn off your connection and the tools keep working. There is nothing phoning home in the background.
Hosting
The site is hosted as static files behind Cloudflare, which serves the pages and provides standard network-level protection. Cloudflare may process basic request metadata such as IP address as part of delivering and securing the site, as any host does. We do not add analytics or tracking on top of that, and no tool sends your content through it.
Verify it yourself
You do not have to take our word for it. Open your browser's developer tools, switch to the Network tab, and use any tool on the site. You will see the page and its assets load once and then nothing else. No upload requests, no beacons, no analytics pings. Privacy you can watch happen beats a promise you have to trust.
The optional API
Some tools are also offered as a REST API and MCP server for scripts and AI agents, documented on the developer page and in the @clean-tools/mcp npm package. Those endpoints run the same engines as the tool pages: every one is read-only and side-effect-free, most are deterministic (same input, same output), and the generator tools use cryptographic randomness. No key or account is required.
Because the API runs at the edge on Cloudflare Workers, a request's content does pass through that infrastructure to be answered — but it is processed in memory and never written to storage or logs, never used to train anything, and no outbound requests are made. The one thing we count is anonymous per-tool call totals (which tool was called, and the names of tools that were requested but don't exist — that tells us what to build next). Never the arguments, never the results, never your IP. The @clean-tools/mcp npm package is a thin bridge that forwards to the same hosted endpoint, and says so in its README. Using the API is entirely optional, and the tool pages themselves still send nothing anywhere.