ToolDesktop v3.0

ToolDesktop Service

Privacy Policy

ToolDesktop runs entirely in your browser. We do not collect, transmit or sell personal data. This page explains what that means in practice, and where the few exceptions live.

Version 1.0 · 2026

Notice: This document may be updated from time to time by the site owners. Please check back regularly.

1. Summary

We do not operate accounts, and we do not ask you to register. Values you type into a tool — loan amounts, rates, salaries, JSON payloads, passwords — are processed by JavaScript on your own device. That data is never transmitted to us, because there is no upload path for it to travel along.

The only things that ever leave your browser are ordinary web requests for the page, its stylesheet, its scripts and any images. Those carry the information a browser always sends, described in section 5.

There is exactly one exception, and it is opt-in: if you use the feedback form, the name, email address and message you type are sent to our third-party form processor. Section 5 sets out exactly what is sent and to whom. No tool can trigger this.

2. Who is responsible

ToolDesktop is the operator of the site hosting this installation and is the data controller for the limited processing described here.

3. What we collect

We do not deliberately collect:

  • names, email addresses, phone numbers or postal addresses;
  • account credentials or payment details;
  • the contents of anything you paste into a tool;
  • files or images you process with a tool;
  • precise location, contacts, or device identifiers such as an advertising ID;
  • behavioural profiles or cross-site tracking data.

The exception is the feedback form, where you give us a name, an email address and a message deliberately in order to contact us. See section 5.

Like any web server, the host may keep standard server logs containing IP address, timestamp, requested URL, user agent and referrer. Those logs are the host's responsibility and are governed by the host's own policy.

4. Data stored on your device

The Service saves a few preferences on your device. They are never sent to us and contain nothing but a theme name, a language code or the name of a keyboard key. The first two are kept in localStorage and in a first-party cookie, so a choice survives even if you clear only one of the two stores:

  • workbench_theme — your light or dark theme choice.
  • workbench_lang — your selected language.
  • workbench_search_key — written only if the search shortcut works on a device whose default keyboard has no modifier key, recording which key you pressed so the hint can be shown correctly. It is either Meta or Control, never anything about you.

Your theme is read back before the page first paints, so reloading does not briefly show the opposite theme. If neither store holds a value, the Service follows your operating system's light or dark preference.

Tool inputs are held only in memory for the life of the page and are discarded on reload. The password generator does not save generated passwords anywhere.

You can erase these values at any time:

  • clear site data for this origin in your browser settings, or
  • open the developer console and run localStorage.clear() and document.cookie = 'workbench_lang=; workbench_theme=; max-age=0'.
  • or clear site data as above, which also removes the key hint.

If both are absent, the Service picks a language from your browser's own language preferences and falls back to English. That choice is not written to storage unless you choose a language yourself.

5. Third parties

Using ToolDesktop uses basic analytics provided by Google Analytics for the purpose of improving the tools and usability of the website. Everything you type into a tool is computed locally and never transmitted.

The feedback form, if you choose to use it, submits the form elements you fill out to Web3Forms (web3forms.com), who receives what you type and forwards it to us by email. Nothing is sent until you press send.

What the feedback form sends

  • your name, as you typed it;
  • your email address, used as the reply-to so we can answer you;
  • the topic you selected;
  • your message.

Web3Forms states that submissions are stored for up to three years and that they encrypt data in transit and at rest. Its own terms and privacy notice govern that processing; we do not control it and cannot see or delete what it holds.

Web3Forms is not bound by this policy. If you would rather not send anything to this third party, do not use the form.

Loading a page necessarily reveals your IP address, user agent and requested URL to the hosting provider and to any DNS or CDN resolver in the path. This is inherent to the web and is not a choice the Service makes.

6. Advertising

The layout contains reserved placeholder slots for sponsored content but are disabled at this time. If you would like to become a sponsor, please use the feedback form to get in touch.

7. Cookies

The Service sets exactly two first-party cookies, holding nothing but your preferences:

  • workbench_theme — light or dark.
  • workbench_lang — your language choice, for example fr.

Both are strictly functional: they remember preferences you expressed, they are readable only by this site, and they expire after twelve months. They are not analytics or advertising cookies, are not used to identify you, and are exempt from the consent requirement that applies to tracking technologies in some jurisdictions. No consent banner is shown because there is nothing here that requires consent.

All other preferences use localStorage, which is not a cookie and is not transmitted with requests. The cookies duplicate two settings purely so a preference survives a visitor clearing just one of the two stores.

8. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to complain to a supervisory authority.

Because we hold no personal data about you, there is normally nothing for us to retrieve, correct or erase. Data you entered into a tool never reached us, so we cannot return or delete it — but because it was never sent, clearing your browser removes it entirely.

9. Security

The Service is delivered over HTTPS where the host supports it. All computation is local, which removes the entire class of risk that would come from transmitting sensitive input to a server. As with any site, we cannot guarantee that a compromise will never occur, but we do not collect data that would be valuable to an attacker.

10. Changes

If this policy changes, the updated version will be posted here with a new version number.

11. Contact

Use the feedback form if you would like to get in touch.