Privacy Policy

Last updated: September 2026

Data Processing

Most tools run entirely in your browser. Text, files, images, PDFs, and passwords you enter into them are processed on your device and are never uploaded or stored by us. This includes the holiday tools, which work out public holidays on your device, and the HTML Validator, which checks your code on your device.

Some tools look information up from an outside service. For these, your browser sends only what the lookup needs straight to that service, and each tool names the service under its results. We do not see, log, or store these lookups, but the service receives your request and your IP address like any website you visit. The services are:

  • Currency Converter: exchange rates from the currency-api project (served by jsDelivr and Cloudflare Pages) and the Frankfurter API. No input is sent.
  • IP Address Info: ipapi.co, ipwho.is, or ipify, to find your public IP address and approximate location.
  • Password Breach Checker and Password Strength Checker (breach check): Have I Been Pwned. Only the first 5 characters of the password's SHA-1 hash are sent, never the password.
  • DNS Lookup and SPF, DKIM and DMARC Checker: Google Public DNS (dns.google), with Cloudflare DNS as a fallback. The domain name is sent.
  • WHOIS Lookup: rdap.org and the domain registry it points to. The domain or IP address is sent.
  • ZIP and Postal Code Lookup: Zippopotam.us and Postcodes.io. The postal code is sent.
  • Security Headers Checker: Mozilla HTTP Observatory. The hostname is sent.
  • URL Unshortener: unshorten.me. The short link is sent.
  • Wayback Machine Checker: the Internet Archive. The URL is sent.
  • Grammar and Spell Checker: LanguageTool. The text you check is sent.
  • Citation Generator: Crossref and Open Library. The DOI, ISBN, or title is sent.
  • Rhyme and Synonym Finder: Datamuse. Dictionary: Wiktionary. The word is sent.
  • On This Day in History: Wikipedia. The date is sent. Moon Phase Calendar: the US Naval Observatory. The year is sent.
  • VIN Decoder, Vehicle Recall Check, and Car Safety Ratings: the US National Highway Traffic Safety Administration (NHTSA). The VIN or vehicle details are sent.
  • Elevation Finder: Open-Elevation, the US Geological Survey, and Photon (place search). The coordinates or place name are sent.
  • Software End-of-Life Checker: endoflife.date. Package Vulnerability Checker: OSV.dev. npm Package Size Checker: Bundlephobia and the npm registry. The product or package name is sent.
  • SSL Certificate Checker: the hostname is sent to our own server, which reads that site's certificate and returns it. We do not log it.

Analytics

We use Google Analytics 4 (GA4) to understand how our tools are used and improve the experience. GA4 collects anonymous usage data such as page views, tool usage events, and general device information. We respect the Do Not Track browser setting.

Cookies

We use a single functional cookie to remember your theme preference (light or dark mode). Analytics cookies are set by Google Analytics. No personal information is stored in cookies.

Local Storage

We use browser local storage to save your favorites list. This data is stored only on your device and is never transmitted to our servers.

Advertising

This site may display advertisements to support the free tools. Ad networks may use cookies to serve relevant ads. Please refer to the respective ad network privacy policies for more information.

Third-Party Links

Our site may contain links to external websites. We are not responsible for the privacy practices of other sites. External links open in new tabs with rel="noopener" for security.

Changes

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.