Privacy Policy

1. Who we are

ToolNest (toolnest.app) is an independently operated website offering free, browser-based tools. This policy applies to toolnest.app and describes how each tool on the site handles data. If you have questions after reading this, see the contact page.

2. Tools that process everything locally in your browser

The following tools run entirely client-side using standard browser technology (Canvas API, Web Crypto API, and similar). Files and text you enter into these tools are never uploaded to a server, never stored by us, and never leave your device at any point:

• QR Code Generator — the text/URL you enter and any logo you upload are processed locally to generate the QR code image.
• Password Generator — passwords are generated using your browser's cryptographically secure random number source and are never transmitted anywhere.
• Image Compressor — uploaded images are compressed using your browser's canvas API and never leave your device.
• Invoice Generator — the business, client, and line-item details you enter are used only to render the live preview and generate a PDF locally.
• Resignation Letter Generator — your details are used only to populate the letter template and generate a local PDF/Word download.
• Cover Letter Maker — same as above: your inputs stay in your browser and are used only to build your downloadable letter.

For all seven tools above, refreshing or closing the page clears everything, since nothing was ever stored outside your browser's active memory in the first place.

3. Tools that use a backend service

Two tools require sending text to a backend in order to function, because the task they perform (drafting prose, checking grammar) requires processing beyond what a browser can do alone. This is disclosed directly on each tool's own page as well.

Tool	What's sent	Sent to	Why
Email Writer	Your typed/dictated points, optional recipient and subject hint, selected tone	Our backend function, which forwards it to Anthropic's API	To generate a complete email draft using an AI language model
Spell Checker	The text you submit for checking	Our backend function, which forwards it to LanguageTool's public API	To check spelling, grammar, and style

For both tools, the request is used only to generate and return the result to your browser — it is not stored in a database on our end, added to any training dataset we control, or linked to any other activity on the site. That said, sending text to a third-party API is a meaningfully different privacy posture than the fully local tools above, so we'd suggest avoiding highly sensitive personal, medical, financial, or legal specifics in these two tools if that's a concern for you.

Voice input on the Email Writer page is a separate, fully local feature: it uses your browser's built-in Web Speech API to transcribe speech to text on your device. No audio is ever recorded, uploaded, or stored — only the resulting text ends up in the input box, and only if you then click "Generate" does that text get sent for drafting.

4. What we don't do

• We don't require an account or login for any tool.
• We don't sell your data to third parties.
• We don't run advertising trackers or third-party ad networks on this site.
• We don't store the files or text you process through the seven fully local tools — we have no access to them at all, since they never reach a server.

5. Cookies and local storage

ToolNest uses your browser's localStorage — not cookies — to remember one thing: your dark/light mode preference (stored under the key tn-theme). This is a small piece of data stored entirely on your device and is never transmitted to us. It's used only to apply your preferred theme when you return to the site, and you can clear it at any time by clearing your browser's site data for toolnest.app.

6. The contact form

If you use the contact form, the name, email address, topic, and message you submit are sent so we can respond to you directly. Your email address is used only to reply to your specific message — it isn't added to a mailing list or shared with any third party.

7. Third-party services we rely on

Two backend tools rely on third-party providers to function, as described in Section 3: Anthropic (for Email Writer's drafting) and LanguageTool (for Spell Checker's grammar and spelling checks). Each provider processes only the specific request sent to them at the moment you use that tool, under their own respective privacy practices. We don't control how these third parties handle data beyond the request itself, so if you have detailed questions about their internal data practices, we'd recommend checking their own published privacy documentation directly.

The site is hosted on Cloudflare Pages, which, like any hosting provider, processes standard web server logs (such as IP address and request timing) as part of delivering the site and its Pages Functions — this is standard infrastructure-level logging common to virtually all websites, separate from anything the tools themselves do with your input.

8. Children's privacy

ToolNest is not directed at children, and we don't knowingly collect personal information from children. Since the site doesn't require accounts or ask for personal information beyond what's voluntarily entered into the contact form or the two backend-dependent tools, we don't maintain profiles of any users, including children.

9. Your choices

Because most of ToolNest requires no account and stores nothing on our end, there's usually nothing to "delete" beyond clearing your own browser's local storage for the dark mode preference. For the two backend tools, simply not using them (or avoiding sensitive specifics within them) is the most direct way to control what's sent to a third party. If you've contacted us through the contact form and would like your message and email address removed from our records, reach out via the same contact page and we'll handle the request.

10. Changes to this policy

If we add a new tool or change how an existing one handles data, this page will be updated to reflect that accurately, including updating the "last updated" date at the top. We won't quietly expand what a tool sends to a third party without updating this page and the relevant tool's own page to disclose it.

11. Contact

Questions about this policy or how a specific tool handles your data can be sent through the contact form — select "Privacy question" as the topic so it's routed appropriately.

12. Why we built most tools to run entirely in your browser

The decision to process files and text locally wherever possible wasn't an afterthought — it shaped the entire technical approach behind ToolNest from the start. Uploading a file to a server, even briefly, introduces a chain of things that could go wrong: the transfer itself could be intercepted on a poorly secured network, the server could log more than intended, a bug could retain a copy longer than planned, or a future change to the business could alter what's done with stored data. A tool that never receives your file in the first place removes that entire chain of risk by design, rather than trying to manage it carefully after the fact. That's why seven of the nine tools on this site are built the way they are: not as a marketing claim, but as an actual architectural choice that happens to have a strong privacy benefit as a side effect.

13. How the two backend tools are kept as narrow as possible

For Email Writer and Spell Checker, where a backend genuinely is necessary, the backend functions themselves are built to do the minimum required and nothing more. Each function receives a request, validates it, forwards only the specific text needed to the relevant third-party API, and returns the result — there's no database recording every request, no analytics layer profiling usage patterns tied to your input, and no logic that repurposes your text for anything beyond generating the immediate response you asked for. Basic operational logs (needed to catch and fix errors, similar to what almost every website's backend produces) may briefly exist at the infrastructure level, but these are not designed or used to build a profile of any individual user's activity.

14. Data retention

For the seven fully local tools, there is no retention question to answer, since your data never reaches a server we control in the first place — it exists only in your browser's memory for the duration of your session. For the two backend-dependent tools, requests are processed and returned without being written to a persistent database on our end; any transient logs that exist for operational debugging are not treated as a record of your usage and are not retained as a matter of policy. For the contact form, your message and email address are kept only as long as needed to respond to and resolve your inquiry, and can be removed sooner at your request as described in Section 9.

15. International users and data transfers

Because ToolNest is accessible globally and its backend functions and third-party providers (Cloudflare, Anthropic, LanguageTool) operate infrastructure across multiple regions, using the two backend-dependent tools may involve your request being processed on servers located outside your own country. This is standard for essentially any cloud-based online service and isn't specific to ToolNest, but we want it stated plainly here rather than left implicit. If this is a significant concern for your particular situation, the seven fully local tools involve no such transfer at all, since nothing leaves your device.

16. No profiling or automated decision-making

ToolNest does not use your data to build a behavioral profile, does not perform automated decision-making that produces legal or similarly significant effects about you, and does not use any tool's output to target advertising, since the site carries no third-party advertising in the first place. The AI-assisted drafting in Email Writer and the grammar suggestions in Spell Checker are generated fresh for each individual request based only on the text you provide in that session — they are not informed by, or contributing to, any persistent profile of who you are or what you've asked for previously.

17. Security measures

All traffic to ToolNest, including requests to the two backend-dependent tools, is encrypted in transit using standard HTTPS/TLS. The backend functions themselves run on Cloudflare's serverless infrastructure rather than a traditional server we manage directly, which limits the attack surface considerably compared to a self-hosted backend, since there's no persistent server process or database of stored user files to secure or potentially breach. Sensitive credentials, such as the API key used to call Anthropic's service for Email Writer, are stored as encrypted environment variables on Cloudflare's platform and are never exposed to the browser or included in any client-side code, keeping them entirely out of reach of anyone inspecting the site's public-facing files or network traffic.

18. Summary table

Tool	Runs	Data leaves your device?
QR Code Generator	Locally	No
Password Generator	Locally	No
Image Compressor	Locally	No
Invoice Generator	Locally	No
Resignation Letter Generator	Locally	No
Cover Letter Maker	Locally	No
Email Writer	Backend + AI provider	Yes — points you submit for drafting
Spell Checker	Backend + grammar provider	Yes — text you submit for checking