Privacy

What ToyTools stores and sends, and what never leaves your device. Every tool runs in your browser: no account, no database, no server sees your input.

Last updated 3 August 2026

The short version

  • Every tool runs entirely in your browser. What you type into a tool is never sent anywhere.
  • There is no account, no login, and no database. Nothing is stored against your identity because there is no identity to store it against.
  • Anything a tool saves for you is saved on your device, and you can export or delete all of it from Settings.
  • Google Analytics does load for ordinary visitors. That is the one thing on this site that reports back, and it is described below.

What runs in your browser

ToyTools is a static site. There is no application server. When you open a tool, the page and its code are downloaded and everything after that happens on your machine: the text you paste into a word counter, the numbers in a loan calculator, the token in a JWT decoder. None of it is transmitted, because there is nothing on the other end to transmit it to.

This is also why the tools keep working with no network once you have loaded them, and why they can be installed to your home screen and used offline.

What is stored on your device

Some tools remember things between visits, for example a notepad's contents, a tracker's log, or your preferred currency. That data is written to your browser's local storage under keys beginning toytools: and toytools., and it stays on that device in that browser. It is never uploaded.

  • Per-tool state (toytools:<tool>) such as notes, todo items and tracker entries.
  • Preferences (toytools:prefs) such as display currency, and the theme (toytools.theme).
  • Body profile (toytools:profile:body) if you have used the health calculators, so several of them do not each ask for the same details.
  • Favourites and recently used tools, to make the catalog navigable.
  • Recent conversions for some tools, in session storage, which the browser discards when you close the tab.

Clearing your browser's site data erases all of it permanently. Because some of it is not recoverable, such as months of tracker entries, there is an export on the Settings page that writes everything to a single JSON file you can keep or move to another device.

What is sent, and to whom

Google Analytics

This site loads Google Analytics (measurement ID G-WHD7CL44MX) to count visits and see which tools get used. It records the usual things a web analytics product records: pages viewed, approximate location derived from your IP address, device and browser type, and referrer. It does not receive anything you type into a tool, because no tool ever passes its input to it.

Analytics is deliberately not loaded when the site is running locally, under automated browser testing, or on localhost, so development and test traffic never reaches it. If you use a tracker blocker or browser-level blocking, nothing on the site depends on analytics loading and everything keeps working.

Feedback

The feedback page does not submit anywhere. It composes a message and hands it to your own email client, so you can see exactly what is being sent before you send it, and you are the one sending it. There is no form endpoint, no relay and no database. If you tick the option to include what you typed into a tool, that text goes into the message you can read; on tools where the input could be a secret, such as the JWT decoder and the hash generators, the option is not offered at all.

Links you share

Calculators such as the compound interest and date difference tools put their inputs in the page address, so you can bookmark a calculation or send it to someone. That only ever contains the numbers you entered into that calculator. The health tools never do this on their own, because your body measurements should not end up in your browser history or in a link by accident; they have a "Copy link" button you press deliberately. Tools whose input may be a secret never put anything in the address at all, and offer no link action.

Cookies

ToyTools sets no cookies of its own. Google Analytics sets its own cookies to recognise repeat visits. Everything the site itself remembers uses local storage, not cookies.

Other services

There are none. No advertising, no comment system, no embedded videos, no chat widget, no social buttons, and no web fonts fetched from a third-party CDN (the fonts are served from this site). The service worker that makes tools work offline stores pages in your browser's own cache and talks to nothing else.

Children

ToyTools is a general-purpose set of utilities and is not directed at children. It asks for no personal information at any point.

Questions

Ask through the feedback page. If something on this page does not match what the site actually does, that is a bug worth reporting.