Privacy policy

The short version

• Every tool runs locally in your browser. There is no upload endpoint for tool input, so documents, images and text cannot reach our servers.
• You can use every tool without an account. No email address is required to work.
• If you create an account, we store your email address, an optional display name, a password hash and your list of favourited tools.
• We do not sell personal data, and we do not run third-party analytics trackers by default.

Tool input and output

Files, text, tokens and colours you enter are processed in memory inside the browser tab. They are never transmitted to us. When you close or refresh the tab, the working data is released by the browser. Downloads are generated locally from a temporary object URL.

Account data

Creating an account is optional. If you do, we store:

• Your email address, used as the unique account identifier.
• An optional display name.
• A bcrypt hash of your password. We never store the password.
• Your favourited tool slugs and any saved presets.
• Anonymised timestamps for account creation and updates.

Account data is stored in MongoDB Atlas. Passwords are hashed with bcrypt and sessions use signed, HTTP-only cookies.

Cookies and local storage

• Theme preference — stored in local storage so the site opens in the mode you chose.
• Guest favourites — stored in local storage until you sign in, at which point they are merged into your account.
• Session cookie — set only when you sign in, needed to keep you authenticated.
• Advertising cookies — only if advertising is enabled (see below).

Advertising

This site may display advertising through Google AdSense or a similar network. Ad providers may set cookies or use device identifiers to measure and personalise ads. Ad scripts load asynchronously and never receive the contents of your tool workspace. You can manage personalised advertising in your Google account settings, and ad blockers do not affect tool functionality.

Third-party processors

• Hosting and CDN — serves the static application and may keep short-lived access logs.
• MongoDB Atlas — stores account and favourites data.
• Advertising network — serves ads when enabled.

Reviews and feedback

When you submit a rating or review, we store the rating, optional comment, tool slug, locale, page URL and timestamp. Reviews are used to improve the tools and are not published automatically. Do not include personal or confidential information in a review.

Your rights

You can request a copy of your account data or ask for it to be deleted by emailing info@cipherslab.com. We aim to respond within 30 days. Deleting your account removes your profile, favourites and stored presets.

Children

The service is not directed at children under 13, and accounts should not be created by them. Tools themselves contain no age-restricted content.

Changes

If this policy changes materially, the date at the top of this page will be updated. Continuing to use the service after a change means you accept the revised policy.

Contact

Questions about privacy can be sent to info@cipherslab.com.