Privacy

We do not collect your files, because we never receive them.

The short version

Every tool on this site processes your data with JavaScript running in your browser, on your device. Files, text, images, passwords and everything else you enter into a tool stay in the memory of your browser tab and are discarded when you close it. They are not uploaded, not stored, not logged and not seen by anyone, because there is no server that could receive them.

How to verify this yourself

Do not take our word for it. Two checks, both about a minute:

Network inspector. Press F12 (or Cmd+Option+I), open the Network tab, and use any tool. You will see the HTML, CSS, JavaScript and font load once. Then use the tool with a real file. Nothing new appears carrying your data.
Turn the network off. Install UtilTools as an app or just load a tool page, then switch off Wi-Fi and mobile data entirely. The tool still works. Software cannot upload a file over a connection that does not exist.

What is stored on your device

A small number of preferences, in your browser's localStorage, on this device only. They are never transmitted and never synced.

Key	What it holds
`ut:favorites`	The slugs of tools you starred, e.g. `["merge-pdf"]`
`ut:theme`	`light`, `dark` or `system`
`ut:recent`	The last 8 tools you opened
`ut:prefs:<tool>`	Settings for a specific tool — the quality slider you last used, for example

Two tools store more, and only because you explicitly ask them to: Online Notepad keeps your notes locally so a refresh does not lose them, and Signature Maker can remember a signature if you tick the box. Both are on your device only, both are clearable in one click inside the tool.

No tool ever writes the content of a file you opened to storage. Health tools — BMI and Calorie — store nothing at all, not even preferences.

To delete everything: clear site data for utiltools.work in your browser settings, or use the "Clear stored preferences" control at the bottom of this page in a browser with JavaScript enabled.

What the server sees

This is where most privacy pages get vague. Being specific:

The site is static files served from Cloudflare Pages. When your browser requests a page, the edge server necessarily observes the request — your IP address, the URL requested, your user agent string, a timestamp, and the referring page if your browser sends one. That is inherent to HTTP; every website on the internet, including this one, receives it. Cloudflare retains these request logs under its own policy, and we do not build profiles from them, join them to anything, or use them for advertising.

What the server does not see is anything you put into a tool, because that never becomes a request.

Advertising

There is no advertising on this site — no network, no pixel, no sponsored placement. The Content Security Policy blocks third-party scripts at the browser level, so an ad tag could not run even if one were added by mistake. The site is funded by the disclosed recommendations on the Partners page.

Analytics

Nothing measures your visit. No Google Analytics, no advertising pixel, no session recording, no heatmap. No third-party script of any kind is loaded on any page; the Content Security Policy blocks it at the browser level even if one were added by mistake.

Cookies

This site sets no cookies. There is no consent banner because there is nothing to consent to.

Affiliate links

The Partners page contains affiliate links, marked as such and disclosed above the links themselves. Following one may let that merchant know the visit came from here. No tool page contains an affiliate link, and no partnership influences the catalog.

Your rights (GDPR and LGPD)

Under the GDPR and Brazil's LGPD you have rights of access, rectification, erasure, restriction, portability and objection over personal data a controller holds about you.

In practice: we hold no account, no profile and no file of yours. The only personal data that exists is in the edge server request logs described above, whose legal basis is legitimate interest in serving and securing the site, and any email you send us. The preferences on your device are not held by us at all and you can erase them yourself at any time by clearing site data.

To exercise a right, or to ask what we hold, email [email protected].

Children

The site is not directed at children and collects no personal data from anyone, of any age.

Changes

Material changes to this page will be summarised at the top with a date, and the page carries a last-updated date at the bottom.

Questions

Do you keep the files I process?

We never receive them. There is no upload step in any tool on this site, so there is nothing to keep, delete or leak.

Is it safe to open a confidential document here?

The document is opened by your browser and never transmitted, which is what makes this different from an upload-based tool. The remaining risks are the ordinary ones on any device: who else has access to your computer, and whether your browser has hostile extensions installed. Neither is something any website can solve for you.

What happens to my file when I close the tab?

It is discarded with the tab's memory. Tools also have a Clear button that drops the data immediately, and every object URL created for a download is revoked afterwards.

Do you sell data to anyone?

There is nothing to sell. No account data, no file content, no behavioural profile, no email list built from usage.

Why should I believe any of this?

You should not have to. Open the network inspector, or turn off your connection and watch the tools keep working. Those two checks are stronger evidence than any statement on a privacy page, including this one.

Last updated 2026-08-22.