Privacy Policy

Summary

You can use our core tools without an account. We only process your files to perform the task you request, we never sell your data, and we delete uploaded and converted files automatically.

• Uploaded and converted files are deleted automatically after 60 minutes (360 minutes for Premium users).
• We do not store IP addresses with your files.
• Some tools (hash calculator, bulk rename) run entirely in your browser; those files are never uploaded.
• You can delete a file from our servers immediately at any time.

Your files

Files you upload are transferred over an encrypted HTTPS connection and stored in an isolated, non-public workspace only for as long as needed to process and download them.

An automated job permanently removes every uploaded file, every converted file and any temporary data once the retention time has passed. Share links stop working when the file expires.

We do not open, analyse, copy or share the content of your files, and we do not use them to train any model.

Data we collect

We follow the principle of data minimisation and only process data that is necessary to provide the service:

• Technical task data: file name, format, size, selected options and processing status, deleted together with the file.
• Usage limits: a daily counter linked to a salted, one-way hash that changes every day. It cannot be used to identify you or to track you across days.
• Account data (only if you register): name, email address, hashed password, language and plan.
• Conversion history (only for registered users): file names and results for 30 days. You can clear it at any time.
• Security logs: short-lived server logs used to detect abuse and fix errors.

Cookies and local storage

We use a small number of essential cookies: a session cookie, a security token (CSRF), an anonymous token that lets only your browser access your own files, and cookies that remember your language and theme.

Your list of recent files is stored in your browser’s local storage and never sent to us.

Advertising cookies from Google are used only if you choose “Accept all”. If you choose “Essential only”, only non-personalised ads are requested. You can change your choice at any time via “Cookie settings” in the footer.

Advertising

Free use of CloudTool is supported by Google AdSense. Google may use cookies to show ads based on your previous visits to this and other websites, if you consent. You can learn how Google uses data at policies.google.com/technologies/partner-sites and opt out of personalised advertising at adssettings.google.com.

Advertisements are clearly labelled and never cover the upload, conversion or download areas. Premium users do not see ads.

Accounts

Creating an account is optional. Passwords are stored using a strong one-way hashing algorithm. You can delete your account at any time from your account page; this removes your profile, history and any remaining files immediately.

Payments

Premium subscriptions are processed by our payment provider. We never receive or store your full card details. We only keep the subscription status and the provider reference needed to manage your plan.

Security

We protect the service with encrypted connections, isolated processing, strict file validation, rate limiting and security headers. No system is perfectly secure, but we work continuously to keep your data safe.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA, PDPA, PIPL, APPI or LGPD), you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent at any time.

Most of these rights can be exercised directly in the service (delete files, clear history, delete account, change cookie settings). For anything else, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.

Children

Our service is not directed at children under 16, and we do not knowingly collect personal data from children.

International transfers

Our servers and service providers may be located in different countries. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed. Significant changes will be announced on the website.

Contact

If you have questions about this policy or your data, please contact the CloudTool privacy team through the contact details published on our website.