Privacy Policy

Effective 3 September 2026 · Operated by toolmunch

The short version. 196 of our 276 tools run entirely inside your browser. When you use one of those, your file or text is never uploaded — it never leaves your device, so there is nothing for us to see, store or lose. We do not sell data, and we do not need an account for most of the site.

1. Who this covers

This policy covers the toolmunch website at toolmunch.com and the API that serves some of its tools. It is operated by toolmunch.

2. The two kinds of tool, and why the difference matters

This is the single most important thing to understand about your privacy here, because it decides whether your data reaches us at all.

Kind	What happens to your file or text
In-browser (196 tools)	Processed by code running in your own browser tab. Nothing is uploaded. Turning off your network connection mid-task does not stop it. We receive no copy and cannot recover your file for you.
REST API (80 tools)	Your input is sent to our server, written to a temporary working directory, processed, and the result returned. That working directory is deleted once the response is sent. We do not keep a copy, do not read the contents, and do not use them to train anything.

Every tool page states which kind it is. If you are working with something sensitive and want certainty, prefer the in-browser tools — with those the guarantee is structural rather than a promise we are asking you to trust.

3. What we collect

Usage counts

When a tool is used we increment a counter for that tool. What is sent is the tool's name — for example merge-pdf — and nothing else. No identifier, no content, no way to connect one use to another or to you.

Analytics

We use Google Analytics 4 to see which pages are visited and roughly where visitors come from. Google receives your IP address, browser and device type, the pages you view, and sets its own cookies to recognise a returning browser. We use this to decide what to build next, not to identify anyone. You can block it with any tracker-blocking extension or your browser's own controls, and the site works exactly the same with it blocked.

Accounts — only for a few tools

Most of the site needs no account. A small number of tools that have to remember something for you — invoices, link shortening, uptime monitors, rank tracking, bio pages, saved QR codes — do. For those we store your email address and a hashed password. Passwords are hashed with Argon2, so the plain password is never written down and cannot be recovered from what we hold, by us or by anyone who obtained our database. Sign-in sessions expire after 60 days.

AI tools

When you use an AI tool, the text you enter is sent to our model provider (Groq) to generate a response. Do not paste anything into an AI tool that you would not be comfortable sending to a third party. Their handling of that request is governed by their own terms, not this policy.

What we do not collect

The contents of files processed by in-browser tools — we never receive them.
Payment details. We do not take payments.
Contacts, location, or anything from your device beyond what a normal web page sees.

4. Cookies and browser storage

toolmunch sets no cookies of its own. Google Analytics sets cookies; we do not.

We do use your browser's local storage, which stays on your device and is never transmitted to us. It holds your light/dark theme choice, unsaved drafts and in-progress work in some tools, and — if you have an account — your sign-in token. Clearing your browser's site data for toolmunch.com erases all of it and signs you out.

5. Advertising

toolmunch currently shows no ads. The site is built to support Google AdSense and that may be switched on later; if it is, Google may use cookies to serve and measure ads, and this page will be updated to say so before that happens.

6. Who else is involved

Running the site means other companies necessarily handle some traffic:

Cloudflare — hosts and delivers the site; sees request metadata such as IP addresses.
Render — hosts the API that serves the server-side tools.
MongoDB Atlas — stores account data, where an account exists.
Google — Analytics, and Search Console for search performance.
Groq — processes AI tool requests.

We do not sell your data, and we do not share it for advertising.

7. Your rights

You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Deleting your account removes your stored records. For the great majority of visitors — anyone using the site without an account — we hold nothing that identifies you, so there is nothing to return or erase.

To make a request, write to privacy@toolmunch.com.

8. Children

toolmunch is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, write to us and we will remove it.

9. Changes

If this policy changes materially, the effective date at the top changes with it. Continuing to use the site after a change means you accept the updated policy.

10. Contact

Questions about this policy or about your data: privacy@toolmunch.com.