Your files
Every tool on this site runs in your browser. Photos, scans and PDFs you choose are read on your device, converted on your device and saved on your device. They are never uploaded to this site or to anyone else: the site has no upload service that could receive them. You can check this yourself: how it works and how to test it.
- When you drop files on the home page and then pick a tool, or press one of the "Keep going" tools under your results, the files are handed to that tool through your browser's own storage (IndexedDB) and deleted as soon as the tool opens them; anything left over is ignored after 10 minutes.
- On Android, if you install the app and share files to it, the same happens: they are kept in your browser's storage on the phone until the home page opens them. One exception you should know about: if this site's data was cleared on the phone and the app hasn't been opened since, Android sends the shared files to the site's address the way a form would. The site ignores them (it doesn't read, store or log them) and just opens the home page; to be fully sure, open the app once before sharing to it.
- The "Show on a map" link in Remove EXIF data opens OpenStreetMap in a new tab only when you click it, and sends it the coordinates shown. Nothing is sent before you click.
What your browser stores
- If you mark guides as read in the Learn section, the list of those guides is kept in your browser's local storage too, so we can show your progress. Use "Reset progress" on the Learn page, or clear your browser data, to delete it.
- Your light or dark theme choice, in your browser's local storage under
klh-theme. - Settings you save with "Save these settings" on an image tool, under
klh-preset:plus the tool's name. Only the options (format, quality and so on), never a file. A settings link you copy holds the options after the # sign, which browsers don't send to the server. - Recipes you save in the Batch image processor, under
klh-recipes: their names and steps only, never a file. A recipe link also holds just the steps, after the # sign. - A password you type into Unlock PDF stays in that tab's memory and is gone when you close it; it is never stored or sent anywhere.
- Offline copies for the app: on the live site, a service worker keeps copies of the pages and tool files you've opened (and, if you press the button on the app page, all tools), so they work without a connection. They contain no personal data and are removed when you clear this site's data or uninstall the app.
- Fonts are served from this site itself, so no font service learns that you visited.
- No accounts and no sign-up. The site itself sets no cookies.
Usage counts
To see which tools are useful, the site adds up anonymous daily totals: how many times each tool was used and how often a few buttons were pressed. Only the day, the tool, the page language and the total are stored. No file names, no file contents, nothing about you, no cookies and no identifiers.
The contact form
The form asks for no name, e-mail address or account. What is stored, in a database on Cloudflare: the message type, your message, the page you picked (optional), your rating (optional), the date, and the country Cloudflare detects from your connection. Your IP address is not stored.
- If you write in another language, the message is translated into English with Cloudflare Workers AI so it can be read. The original is kept next to the translation.
- To stop spam, the form uses Cloudflare Turnstile, a security check that runs in your browser and is sent to Cloudflare. It doesn't use your message.
- Messages are only read by the site owner, never shared or sold, and deleted automatically after 12 months.
Visitor statistics
The site uses Cloudflare Web Analytics to count page views. It sets no cookies, doesn't track you across sites and doesn't identify you.
Advertising
No ads are shown yet. If Google AdSense ads are added later, this section will describe them before they appear, and visitors in the EEA, the UK and Switzerland will be asked for consent first.
Hosting
The site is hosted on Cloudflare, which processes basic technical data such as IP addresses to deliver pages and protect against attacks. This covers loading the pages and tool code, not your files: they never leave your device.
Your rights
Under the GDPR you can ask what data is held about you, and ask for it to be corrected or deleted. Because contact messages carry no name or e-mail, the way to have one deleted is to send a new message through the contact form quoting its date and first words.
Changes
If the site starts handling any other personal data, this page will be updated first and will list exactly what changes.