Skip to content
Utilboxes

Privacy Policy

What happens to your data when you use these tools — written plainly, because the answer is short.

Last updated September 25, 2026

The short version

149 of the 154 tools on this site process everything inside your own browser. The files you open, the text you paste and the numbers you type are never transmitted to us or to anyone else. We could not read them if we wanted to, because they never arrive.

How the tools work

When you drop a PDF onto the merge tool, your browser reads the file into memory, rearranges it there, and hands the result straight back to you as a download. No upload takes place. You can verify this yourself: open your browser's developer tools, switch to the Network tab, and watch that no request carries your document. Most of these tools also keep working with your network disconnected.

The same applies to image tools, text tools, developer tools, calculators and generators. Some of them download a library on first use — the OCR language model, for example, the HEIC decoder, or the speech-recognition model used by the voice-to-text tool. Those are the same public files for every visitor and contain nothing about you. Some of them are served from public code CDNs or from Hugging Face rather than from us, so those hosts see your IP address and nothing else, in the same way any website you visit does. Nothing you typed, chose or opened is part of that request.

The exceptions

These tools contact a server, and it is worth being precise about what they send:

  • YouTube Thumbnail Grabber — loads the thumbnail images straight from YouTube's image server, i.ytimg.com. The request contains only the video ID taken from the link you paste; it does not pass through this site. YouTube sees your IP address, as it would for any YouTube image you view.
  • Currency Converter — fetches published reference exchange rates. The request contains only a three-letter currency code such as USD. The amount you type is converted in your browser and is never sent.
  • SSL Certificate Checker — sends the domain name or web address you type, and nothing else, to this site's own server. The server makes the connection or lookup a browser is not permitted to make and returns the result. We do not save what was checked; the address is sent in the request body, so standard hosting logs record that a check ran but not what it was for. Where the check fetches another website, that website sees our server's address, not yours.
  • Email Address Validator — sends the domain name or web address you type, and nothing else, to this site's own server. The server makes the connection or lookup a browser is not permitted to make and returns the result. We do not save what was checked; the address is sent in the request body, so standard hosting logs record that a check ran but not what it was for. Where the check fetches another website, that website sees our server's address, not yours.
  • Open Graph Preview — sends the domain name or web address you type, and nothing else, to this site's own server. The server makes the connection or lookup a browser is not permitted to make and returns the result. We do not save what was checked; the address is sent in the request body, so standard hosting logs record that a check ran but not what it was for. Where the check fetches another website, that website sees our server's address, not yours.

What we do collect

Like any website, our hosting provider records standard server logs when your browser requests a page: the page address, a timestamp, your IP address, and your browser's user agent. These are used to keep the service running and to investigate faults.

If you accept analytics cookies on the cookie banner, we also use Google Analytics to understand which tools are used, with IP anonymisation enabled. If you reject them, or have not chosen yet, it is not loaded at all. It records page views and coarse events such as “a tool was run” or “a download happened”. It never receives your file names, file contents, extracted text, or anything you typed into a tool.

Cookies and local storage

We set no tracking cookies. Your light or dark theme preference is kept in your browser's local storage, which stays on your device and is never sent anywhere. See the Cookie Policy for the full detail.

Advertising

This site displays advertisements through Google AdSense. Google may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising through Google's Ads Settings. Advertising is never placed inside a tool's controls, and no data you enter into a tool is shared with advertisers.

Data we do not have

There are no user accounts, so we hold no names, email addresses or passwords. There is no upload storage, so we hold no documents or images. Nothing you process here is retained after you close the tab.

Your rights

Under the UK GDPR, the EU GDPR and similar laws you have rights of access, rectification and erasure over personal data held about you. In practice we hold almost none — server logs and, if enabled, anonymised analytics. To make a request, or to ask anything about this policy, contact void.9826@gmail.com.

Children

This site is not directed at children under 13 and we do not knowingly collect personal information from them.

Changes

If this policy changes, the date at the top of this page changes with it. Material changes will be noted here rather than made quietly.

Who operates this site

This site is operated by the operator of Utilboxes. Contact: void.9826@gmail.com.