Privacy & cookies

Last updated: 3 November 2026

Who is responsible for your data

ToolsAllInOne is run by ToolsAllInOne ("we", "us"). We are the controller for the limited personal data described on this page. Contact: [email protected]. Full details are in the legal notice.

The short version

Your files are processed on your own device and are never uploaded to us. There are no accounts, no tool asks for your name or email, and we run no analytics. This build of the site carries no advertising and sets no cookies.

Files you convert

When you drop a file onto this site, it is read from your disk into your browser's memory and processed there. It is not transmitted to us or to anyone else. We operate no upload endpoint and store no copies. We cannot see the contents, the file name or the file type, and we could not produce your file if asked, because we never receive it.

Results are held in your browser's memory until you download them, remove the file from the list, or close the tab.

Camera, microphone and screen

The webcam test, microphone test, voice recorder, screen recorder and scan to PDF tools use your camera, microphone or screen only after your browser asks and you allow it. The live stream is processed inside the tab and is never sent to us or anyone else. Recordings and scans stay in the tab's memory and are saved only if you download them. Your browser shows when a device is in use, closing the tab always ends access, and you can withdraw the permission at any time in your browser's site settings.

Information collected automatically

This is a static website hosted by Cloudflare, Inc. (Cloudflare Pages). Like any web host, it processes standard request data (IP address, browser user-agent, the page requested and the time) to deliver pages and protect against abuse, and keeps it for the periods set out in its own privacy policy. We do not combine this data with anything else or use it to build a profile of you.

Most of the code this site uses is served from this site itself, including the Transformers.js library, the OCR engine with its English language data, the face-detection engine and model, the background-removal model and the text-to-speech voice. A few large engines and models are fetched from public CDNs the first time you use a tool that needs them, and are then kept on your device:

• jsDelivr, with unpkg as a backup: the ffmpeg audio and video engine (about 32 MB).
• jsDelivr: the WebAssembly runtimes used by the AI tools and the ONNX runtime used by background removal.
• Hugging Face: the machine-learning models for transcription and automatic subtitles (Whisper), translation (Opus-MT), text-to-speech (SpeechT5) and AI upscaling (Swin2SR).

When one of those downloads happens, that provider receives your IP address and browser user-agent, as it would for any file it serves. Your file is never part of that request: only the engine travels, and it travels to you. If you never open a tool that needs one of them, no such request is made.

Advertising and cookies

This build of the site carries no advertising. No ad script is loaded, no advertising cookie is set, and no advertising or analytics company is told that you visited. We set no cookies of our own, and we use no analytics, tracking pixels or social media widgets.

What this site stores on your device

Separately from the above, the site keeps the following in your browser, each only because you asked for it (a theme you chose, a note you typed, a tool you opened), which is why no consent is needed for it under the strictly-necessary exemption (PECR regulation 6(4), ePrivacy Directive Article 5(3)). None of it is a cookie, and none of it is ever sent to us or anyone else:

• Your light or dark theme choice, in local storage under the key lc-theme, so the site looks the same next time.
• Your online notepad text, only if you use that tool. It is kept in local storage under the key lt-note-notepad so the note survives a refresh, and it stays in this browser on this device.
• Cached copies of pages you have visited, the site's own code and the audio/video engine, kept by a service worker so pages load quickly and the 32 MB media engine is not downloaded again on every visit.
• Downloaded AI models and OCR language data, which the speech, translation, upscaling and OCR engines keep in your browser's own storage (Cache Storage and IndexedDB) so they are not downloaded again. A single model can be tens or hundreds of megabytes.

You can remove all of this at any time by clearing site data for this site in your browser settings. That resets your theme, permanently deletes any notepad text (it cannot be recovered), and means engines and models are downloaded again the next time you use them.

Emails you send us

If you email us, we receive your email address and whatever you write. We use it only to reply, and we delete it within 12 months of the conversation ending unless we need it to deal with a legal claim.

Legal bases

• Serving pages and engine downloads (the request data above): our legitimate interest in running a working, secure website and in delivering the tool you chose to use (Article 6(1)(f) UK GDPR and GDPR). Engines and models are fetched only when you start a tool that needs them.
• Emails you send us: our legitimate interest in answering you (Article 6(1)(f)).

Who receives data, and where

Our host and the CDNs listed above receive request data when they serve files to your browser. Those requests also carry the address of the page that asked for the file (the referrer), which shows which tool you opened. Your browser connects to them directly; we send them nothing ourselves. These providers may process that data outside the UK and the EEA, including in the United States, and explain the safeguards they use in their own privacy policies: our host, jsDelivr, unpkg (served through Cloudflare's network), Hugging Face.

How long data is kept

• Your files: never received, so never kept.
• Host and CDN request data: kept by those providers under their own policies. We do not download or keep copies of it.
• Emails: as stated above.
• Data stored in your browser: until you clear it.

Children

This site is not directed at children under 13, and we do not knowingly collect personal information from them.

Your rights

Under UK GDPR and GDPR you can ask for access to, correction of, or deletion of personal data we hold about you; restrict or object to how we use it; ask for a portable copy; and withdraw consent at any time. The only personal data we hold ourselves is email you choose to send us. To use any of these rights, email [email protected]. The CDNs listed above handle their own request logs under their own privacy policies.

Right to object. Where we rely on legitimate interests, you can object at any time, and we will stop unless we can show compelling grounds. Email [email protected].

These rights are not limited to the UK and the EU. Wherever you live, you can make the same requests in the same way, and we answer them within one month. That includes the rights you have under other privacy laws, such as Brazil’s LGPD, India’s Digital Personal Data Protection Act, Japan’s APPI, Canada’s PIPEDA, Australia’s Privacy Act, South Africa’s POPIA and the privacy laws of US states such as California. Using them never changes how the site works for you.

Complaints

If you are unhappy with how we handle your data, please tell us first at [email protected]. We will acknowledge your complaint within 30 days and tell you the outcome. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU or EEA, the authority in the country where you live or work; anywhere else, the data protection authority of your country.

Do Not Track

This site does not change how it behaves in response to browser Do Not Track signals. The site itself does no tracking.

Changes

When this policy changes materially, we update the date at the top of this page.

Contact

Privacy questions: [email protected]