Skip to content
brownie.tools

Privacy Policy

Last updated:

Our Core Promise

Your files never leave your device. brownie.tools processes all files entirely in your browser. There is no upload, no server-side processing, no cloud storage, and no data collection. Tool code processes your files locally without network requests. Content Security Policy headers allow connections only to this site, which also serves tool engines and models.

Data We Collect

Files You Process

Files you select, drag, or paste into any tool are loaded into your browser's memory using the JavaScript File API. They are processed locally using native browser APIs (Canvas API, Web Crypto API, or plain JavaScript). The resulting output is made available for download. No file data is transmitted over the network, stored on any server, or stored remotely. Writing documents and versions are saved locally as described below. When you close the tab or navigate away, the data is released from memory.

Local browser storage

brownie.tools may store the following data in your browser:

  • Theme preference (dark/light mode) - stored automatically as a "strictly necessary" preference.
  • Recent tools list - stored only if you explicitly enable it. Disabled by default. Contains only tool names and URLs (no file data). You can disable this or clear the list at any time.
  • Writing documents and versions - Markdown Editor and Online Notepad store titles, text, and saved versions in the bt-local-documents IndexedDB database, with localStorage as a fallback. Use "Delete all local notes" in either tool or on the Local Storage page, or clear this site's browser data. Downloaded backups must be deleted separately.

Outside of those writing documents and versions, no file content, file names, or processing results are ever written to localStorage, IndexedDB, cookies, or any other persistent storage mechanism. Image, PDF, audio/video, and calculator tools hold data only in transient browser memory and release it when you close the tab.

Analytics

Server-side page counts. Our host (Cloudflare) counts page requests at the server. For each request, we record the page path, country, device type (mobile/tablet/desktop), the referring website's domain, and whether the request came from a bot. We record no IP address, cookies, or full user-agent, use no JavaScript, and create no individual profiles. These counts are used only to know which tools people use.

We use Google Search Console (GSC) to understand how users find our site through search engines. GSC collects:

  • Search queries that led to our site (aggregated, anonymous)
  • Page impressions and click-through rates
  • Indexing status

GSC does not set cookies, does not track individual users, and does not collect any data about your behavior on our site. The data is available only in aggregate through Google's search performance reports.

We do not use Google Analytics, Facebook Pixel, or any other client-side analytics or tracking library. No analytics JavaScript is loaded on tool pages.

Cookies

brownie.tools sets zero cookies. No session cookies, no tracking cookies, no analytics cookies, no advertising cookies. This means no cookie consent banner is needed, and your browsing is not tracked.

Third-Party Services

brownie.tools uses the following third-party services:

Service Purpose Data Shared
Cloudflare Pages Website hosting and CDN Standard HTTP request data (IP, User-Agent) for serving pages

Cloudflare's privacy practices are governed by Cloudflare's Privacy Policy. Cloudflare automatically logs standard web request data (IP addresses, User-Agent strings) for security and performance purposes. We do not have access to individual request logs.

Browser Extensions

This section covers our browser extensions for Chrome, Edge and Firefox. None of them has an account, analytics, cookies or advertising, none loads remote code, and none sends your files, images, colors or page content to us or anyone else. Links to brownie.tools open only when you click them and carry a tag that says the visit came from an extension. Everything else in this policy applies to the extensions where it fits.

Image Tools

Images you choose, drop or paste never leave your device. The extension compresses, converts, resizes, rotates, flips and crops them in its side panel, using your browser's own image features and compression code that ships inside the extension. The result is saved with a normal browser download, or copied to your clipboard when you click Copy. "Remove location data" deletes the GPS position and other metadata from a JPEG without re-encoding it; only the orientation tag stays, so the photo still shows upright.

  • Site access you grant. The extension asks for access to one site at a time, when you right-click an image hosted there. It does not ask for access to all sites when you install it. Your browser keeps the permission. You can remove it in the panel settings or in your browser's extension settings.
  • The address of the image you right-clicked. It is held in the browser's session storage, in memory, so the side panel can open that image. The browser clears it when it closes.
  • Network requests. The only request it makes is to fetch the image you right-clicked from the site that hosts it, after you have allowed that site, without cookies or sign-in data. Local files, pasted images and data: or blob: images need no request.

Color Picker & Eyedropper

  • Picking. Colors are picked with your browser's eyedropper or, on request, from a screenshot of the visible tab that stays in memory and is discarded right after the pick.
  • Page access only when you ask. The extension reads a page only after you click its toolbar icon or its right-click menu on that page (the browser's "active tab" permission), and only to pick a color or list the colors the page uses. It has no access to any site by default and makes no network requests.
  • What it stores. Your settings and, if "Keep history" is on, the colors you picked (up to 50, plus pinned ones) in the browser's local extension storage on your device. You can clear the history in the panel at any time; removing the extension deletes it.

QR Code Generator & Reader

  • Making codes. QR codes are drawn on your device. The address of the current page is read only when you open the extension on it (the browser's "active tab" permission). Logos you add stay in memory and are never stored.
  • Reading codes. "Scan this page" takes a screenshot of the visible tab only after you click it; the screenshot stays in memory and is discarded after decoding. Images you choose, drop or paste are read the same way. Links found in a code open only when you press Open.
  • What it stores. Your settings and, if "Keep history" is on, up to 100 codes you made or read, in the browser's local extension storage on your device. Wi-Fi passwords are saved only if you tick "Save to history (includes password)". You can clear the history at any time; removing the extension deletes it. The extension makes no network requests.

Screenshot & Blur

  • Capturing. A screenshot is taken only after you click the toolbar icon, use a shortcut or choose the right-click item on that tab (the browser's "active tab" permission). For a full page the extension scrolls the tab, captures it in pieces and puts the tab back as it was. The picture is kept only in the extension's local storage while its editor tab is open, deleted when you close the tab (and anything older than 30 minutes is cleared).
  • Suggestions. The text of the tab is searched on your device for emails, phone numbers, card numbers, IBANs, IP addresses and common API keys, to suggest what to hide. The matches are not stored or sent anywhere.
  • What it stores. Only your settings (format, quality, file name pattern, whether to suggest) in the browser's local extension storage on your device. A picture is held there only while its editor tab is open (see above); the file you save goes where you choose. The extension makes no network requests.

Limited Use

The use of information received by our extensions adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Each extension uses what you give it only for its single purpose on your device. We do not sell or transfer user data to third parties, do not use it for advertising or credit decisions, and collect nothing that anyone at brownie.tools could read.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: You can view data stored locally (localStorage and IndexedDB) through your browser's DevTools.
  • Right to erasure: Use the Local Storage page to delete preferences, documents, and versions. No server-side data exists to delete.
  • Right to data portability: Your localStorage data is accessible in standard JSON format through DevTools.
  • Right to object: Since we do not process personal data beyond local browser storage, there is nothing to object to.

California Residents (CCPA)

brownie.tools does not sell, rent, or share personal information with third parties for their direct marketing purposes. We do not sell personal information as defined by the California Consumer Privacy Act (CCPA). There is no "Do Not Sell My Personal Information" link because there is nothing to sell.

Children's Privacy

brownie.tools does not knowingly collect personal information from children under 13. Since we collect no personal information from any user, this applies universally.

Changes to This Policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. Since Browser Toolkit does not collect email addresses, we cannot notify users directly - we recommend checking this page periodically.

Contact

If you have questions about this privacy policy or our data practices, please use the feedback button available on any tool page.