Privacy, in plain words

Last updated 6 November 2026.

The short version

Your files never leave your device. Every tool on Virtual ToolKit runs inside your own web browser. When you merge a PDF or compress a photo, your phone or computer does the work. Nothing is uploaded to us or to anyone else.

What we do not collect

• We do not see, store or copy your files, or the text and numbers you type into tools.
• There are no accounts, so we have no names, email addresses or passwords.
• There is no advertising and there are no tracking cookies on this site.
• We count visits with Cloudflare Web Analytics, explained below. It never sees what you type or the files you open.

What stays on your device

Some small things are saved in your browser so the site is easier to use. Only you can see them:

• The tools you used recently and the tools you saved to "my tools".
• A copy of the site's pages and code, so tools keep working without internet.
• When you send a result from one tool to another, the file is kept in your browser's storage for up to an hour, then deleted.

You can remove all of this by clearing this site's data in your browser settings.

AI tools

Summarise text, Rewrite text, Proofread grammar, Email writer, Cover letter maker and Ask a document can use an AI model that runs inside your browser. Your text stays on your device. The first time, your browser downloads the model (about 800 MB) from Hugging Face, a public model host, and keeps it; you can remove it by clearing this site’s data. The photo upscaler and the background remover’s cut-out model work the same way with smaller models. Each file is checked against a fingerprint kept on this site before it is used. That download is a request for a file, like opening any web page: Hugging Face and the network that delivers its files see your internet address and browser, underHugging Face’s privacy policy. No account or cookie of theirs is used. Your text and photos are not part of it.

Visit counts (Cloudflare Web Analytics)

To see which tools people use, the site uses Cloudflare Web Analytics, a small script from Cloudflare. It sets no cookies and does not use your browser’s storage. It reports which page was opened, the site that sent you there, your browser and device type, your country and how fast the page loaded. It does not see your files or anything you type into a tool, and we cannot use it to identify you. Cloudflare handles this under its own privacy policy.

Exchange rates

The currency converter downloads the day’s exchange-rate table from the free exchange-api project (through jsDelivr, or its backup on Cloudflare), or, if both are down, from Frankfurter (api.frankfurter.dev). Only the table is fetched, the same for everyone; the amounts and currencies you pick are never sent. Like any download, those services see your IP address. The table is kept in your browser so the converter also works offline.

Our web host

The site is served by Cloudflare Pages. Like any web host, Cloudflare handles the request for each page and may keep short-lived technical logs (such as IP address and browser type) to run and protect the service. Those requests never contain your files or the text you type.

Security

Pages are locked down so they cannot send your data to other websites, and the only outside code they may load is Cloudflare’s visit counter. The currency converter only downloads a rate table. If you find a security problem, please tell us using the contact in oursecurity.txt file.

Software we build on

The exact Office conversions use LibreOffice, compiled to run in the browser and served from this site. PDF text in other scripts uses Noto fonts (SIL Open Font License) served from this site. Calendar holidays come from date-holidays, whose holiday data is licensed CC BY-SA 3.0 and used unchanged. LibreOffice is free software under the Mozilla Public License 2.0; its source code is at libreoffice.org. We change two small pieces of the browser glue code (so it runs without “eval” and with more threads), described in our build script.

The in-browser AI uses Qwen3.5 0.8B (Apache License 2.0), run by Transformers.js and ONNX Runtime (Apache and MIT licences). The photo upscaler uses Real-ESRGAN realesr-general-x4v3 by Xintao Wang and others (BSD 3-Clause), whose licence is served beside the model. The background remover uses ISNet general-use by Xuebin Qin and others (Apache License 2.0).

If this changes

If we ever add advertising or anything else that changes what is collected, this page will say so first, in the same plain words.