Back to Toolbox/Privacy Policy
Privacy & Security First

Privacy Policy

Last updated: September 2026

100% Client-Side Architecture

At Toolium, privacy is not a compliance checkbox — it is the architectural foundation of everything we build. All computations, text operations, image compressions, PDF merges, and cryptographic calculations happen directly in your browser. Your data never touches our servers.

Zero Remote Uploads

Your files, inputs, keys, and tokens are processed in browser memory and discarded when you close or reload the tab.

Zero Server Storage

We operate no backend databases that collect your tool payloads. We cannot see, read, or leak what you process.

No Telemetry on Data

No keystroke loggers, no payload tracking, no third-party session replays inspecting your sensitive payloads.

1. Information We Do Not Collect

When you use any tool on Toolium (such as formatting JSON, decoding JWT tokens, hashing passwords, resizing images, or converting documents), the data you paste, upload, or generate remains strictly on your device. We do not transmit, log, inspect, or retain any tool input or output.


2. Local Storage and Client-Side State

Some tools may provide an optional "History" or preference feature (such as remembering your dark mode preference or keeping recent format actions for your convenience). Any such state is saved exclusively in your browser's local storage (localStorage) and is never synchronized to an external server. You can clear this data at any time through your browser settings.


3. Web Analytics and Technical Telemetry

To understand high-level site traffic and keep Toolium reliable and fast, we may collect aggregated, non-personally identifiable metrics (such as page views, referral sources, and browser user agent). These analytics do not contain any information about what you type or process inside any tool.


4. Third-Party CDNs and Hosting

Toolium is hosted statically on high-performance global edge networks. Standard web server logs (which capture IP addresses and request timestamps for DDoS mitigation and infrastructure security) are handled by the hosting infrastructure in accordance with industry security standards.


5. Contact Us

If you have questions or feedback about our local-first architecture or privacy practices, please contact us at contact@byteleaps.com.