Short version: if you don’t sign in, nothing is saved about you. If you sign in with Google, your settings, history, pastes and images are stored privately so they follow you across devices. We count page views and tool usage anonymously — no cookies, no advertising trackers, no IP addresses stored.
Nothing is saved. Tools work in memory and forget everything when you close or reload the page, and nothing is written to your browser’s storage.
Signing in is optional and uses Google sign-in through Supabase, our database and authentication provider, which receives your name, email address and profile photo. To sync across devices we then store your settings, pinned and recent tools, tool inputs, output history and pastes in Supabase, and gallery images in Cloudflare R2 (private storage — images are only reachable through short-lived links issued to you). Each account can only read its own data. You can erase all of it at any time with Delete my data on your profile page.
Only two things: your AI API keys, which are never uploaded anywhere except directly to the AI provider when you run a tool, and the sign-in session token that keeps you logged in. Signing out removes the session; Delete my data also removes the keys.
If you send a bug report, we store what you write, the page you were on, your browser type and — only if you enter it — your email address, so we can fix the problem and reply. Reports are visible only to the site admin, and you can ask us to delete yours at any time.
To learn which pages and tools are useful, we count page views and tool usage (for example “Word Counter was used” or “a result was copied”) — never what you typed, pasted or uploaded. We record the page, the referring website’s domain, a rough device type (mobile, tablet or desktop) and your country as reported by our hosting provider. There are no cookies and nothing is stored in your browser. We don’t store IP addresses: to count unique visitors we keep a one-way hash that changes every day, so visits can’t be linked across days or back to you. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.
Pages are served as static files; the host may keep standard server logs (IP address, user agent, requested URL) for security and reliability.