Privacy Policy

• Client-side tools (image compressor, PDF merger, gradient generator, regex tester) process data entirely in your browser. Files and text never leave your device.
• Server-side tools (JWT simulator, cookie analyzer, CORS tester, OAuth debugger) receive your input over TLS, process it in memory, and discard the raw input after the response is returned.
• Secrets are never persisted. Tokens, cookie values, and client secrets are redacted before anything is written to storage or logs.

If you are signed in and your plan includes history, we store the derived result — tool name, timestamp, and findings — with sensitive input fields redacted. Free accounts retain the last 5 results; paid plans retain full history until you delete it.

Operational logs record request timing, status codes, IP address, and user agent for abuse prevention and are retained for 30 days. Request bodies are not logged.

OAuth sign-in with Google or GitHub shares only your email address and provider account ID. Payment processing, when enabled, is handled by a third-party processor; we do not store card details.

You can delete individual results or your entire account from the dashboard. Account deletion removes stored history within 30 days. Requests: privacy@cooltechtools.com