Privacy Policy
Last updated 27 August 2026. Calculator math stays in the tab. Ads and analytics only load if you say yes. Typefaces ship from this domain. PDF, Chart.js, and Markdown libraries are files on this origin. Hash generator and QR still fetch from jsDelivr. IFSC lookups hit a bank-code directory. Remaining CDN libraries are version-pinned with Subresource Integrity.
Who this covers
Privy Tools is a static site I operate, served from Netlify, at privytools.com. Contact is Share feedback — there is no public inbox.
Tool inputs
I do not operate a calculator backend that stores GST amounts, CTC, JWTs, PDFs, or passwords you type into a tool. Those values are processed by JavaScript in your browser. I cannot read them later because they were never sent to me as part of the calculation.
Exceptions are named on the tool page’s privacy panel:
- IFSC finder queries an outside bank-branch directory with the IFSC you typed. There is no account-number field.
- Hash generator loads crypto-js 4.2.0 from jsDelivr so MD5/SHA-1/SHA-256 can run. Your text stays in the tab; that hop is the library.
- QR code generator loads qrcode 1.5.3 from jsDelivr to draw the image. The payload stays in the tab.
- Some ZIP, spreadsheet, Word, and OCR tools still load an open-source library from a file host (jsDelivr or cdnjs). Those remote script tags are version-pinned and carry Subresource Integrity hashes. pdf-lib, pdf.js, Chart.js, marked, and highlight.js are files on this origin. Your document bytes stay in the tab; the library download is separate.
- The in-tab background remover loads model weights from a file host / Hugging Face on first use. Image pixels are not posted to Privy Tools. A service worker may cache those weights so a later visit does not download them again.
Some tools offer Remember on this device. That writes the fields you typed into this browser’s storage so you do not re-enter a landlord name or last GST rate. It is not an account. I never receive those values. Uncheck the box or tap Forget to wipe them. The same tools may keep values for the current tab so you can switch pages and come back without retyping. Calculator URLs may store inputs in the hash (#), not the query string. Worksheets you save are files on your computer. The chained workspace parks files in this browser’s IndexedDB until you clear them.
Browser extensions, employer monitoring, and “share screen” are outside this policy. A local tool is not a vault.
Cookies, consent, analytics, and ads
A consent banner (CMP) asks before optional cookies. Essential storage is limited to things like your theme preference and the consent choice itself.
If you accept analytics, Google Analytics (measurement ID G-0926V9FD8C) may run. If you accept advertising, Google AdSense (publisher ID ca-pub-1417191147591932) may run. Those services receive standard technical data: IP address, user agent, pages visited, and similar. They do not receive the contents of tool fields from the calculator scripts.
If you decline, those tags should not load. You can change your mind via the banner controls. Google’s own policies still apply to any data they process after consent.
Feedback form (Netlify function)
The Share feedback form posts to a Netlify function. That function receives the type, message, and the page URL / user-agent the form attaches. There is no public email address and no email field on the form. The function is origin-checked against an allowlist. It is not used to compute GST or decode JWTs. Do not paste secrets into feedback.
Other third parties
Typefaces ship from this domain (/src/fonts/). Netlify hosts the static files and the feedback function. jsDelivr still serves crypto-js (hash generator) and qrcode (QR generator). PDF, Chart.js, and Markdown libraries are files on this origin. Other file-host CDNs appear only on tools that need a library, as disclosed on those pages, with pinned versions and Subresource Integrity. A service worker may cache first-party pages and assets for offline use of tools that do not call IFSC or a CDN library; Google Ads, Analytics, and those CDN fetches stay network-only.
What I do not do
No accounts. No sale of tool inputs. No “we never use cookies” claim while AdSense is wired. The honest version is the banner plus this page plus the note What “runs in the browser” does and does not mean.